deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-2893
Published: 2025-04-29
Description: The Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's countdown Block in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/gutenverse/tags/2.2.1/assets/js/blocks.js; https://plugins.trac.wordpress.org/changeset/3281650/; https://wordpress.org/plugins/gutenverse/#developers
CVE: CVE-2025-3452
Published: 2025-04-29
Description: The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'secupress_reinstall_plugins_admin_ajax_cb' function in all versions up to, and including, 2.3.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/secupress/trunk/free/modules/plugins-themes/tools.php#L686; https://plugins.trac.wordpress.org/changeset/3283453/; https://www.wordfence.com/threat-intel/vulnerabilities/id/d9125873-aedd-4334-b8e0-74b67d301904?source=cve
CVE: CVE-2024-58099
Published: 2025-04-29
Description: In the Linux kernel, the following vulnerability has been resolved:

vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame

Andrew and Nikolay reported connectivity issues with Cilium's service
load-balancing in case of vmxnet3.

If a BPF program for native XDP adds an encapsulation header such as
IPIP and transmits the packet out the same interface, then in case
of vmxnet3 a corrupted packet is being sent and subsequently dropped
on the path.

vmxnet3_xdp_xmit_frame() which is called e.g. via vmxnet3_run_xdp()
through vmxnet3_xdp_xmit_back() calculates an incorrect DMA address:

  page = virt_to_page(xdpf->data);
  tbi->dma_addr = page_pool_get_dma_addr(page) +
                  VMXNET3_XDP_HEADROOM;
  dma_sync_single_for_device(&adapter->pdev->dev,
                             tbi->dma_addr, buf_size,
                             DMA_TO_DEVICE);

The above assumes a fixed offset (VMXNET3_XDP_HEADROOM), but the XDP
BPF program could have moved xdp->data. While the passed buf_size is
correct (xdpf->len), the dma_addr needs to have a dynamic offset which
can be calculated as xdpf->data - (void *)xdpf, that is, xdp->data -
xdp->data_hard_start.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://git.kernel.org/stable/c/4678adf94da4a9e9683817b246b58ce15fb81782; https://git.kernel.org/stable/c/59ba6cdadb9c26b606a365eb9c9b25eb2052622d; https://git.kernel.org/stable/c/f82eb34fb59a8fb96c19f4f492c20eb774140bb5
CVE: CVE-2025-1194
Published: 2025-04-29
Description: A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py` of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions process specially crafted inputs. The issue stems from a regex exhibiting exponential complexity under certain conditions, leading to excessive backtracking. This can result in high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.48.1 (latest).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333
References: https://github.com/huggingface/transformers/commit/92c5ca9dd70de3ade2af2eb835c96215cc50e815; https://huntr.com/bounties/86f58dcd-683f-4adc-a735-849f51e9abb2; https://huntr.com/bounties/86f58dcd-683f-4adc-a735-849f51e9abb2
CVE: CVE-2025-30194
Published: 2025-04-29
Description: When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illegal memory access (double-free) and crash of DNSdist, causing a denial of service.

The remedy is: upgrade to the patched 1.9.9 version.

A workaround is to temporarily switch to the h2o provider until DNSdist has been upgraded to a fixed version.

We would like to thank Charles Howes for bringing this issue to our attention.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2025-02.html; http://www.openwall.com/lists/oss-security/2025/04/29/1; https://www.vicarius.io/vsociety/posts/cve-2025-30194-detection-dnsdist-vulnerability
CVE: CVE-2025-3891
Published: 2025-04-29
Description: A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://access.redhat.com/errata/RHSA-2025:10002; https://access.redhat.com/errata/RHSA-2025:10003; https://access.redhat.com/errata/RHSA-2025:10004
CVE: CVE-2025-3929
Published: 2025-04-29
Description: An XSS issue was discovered in MDaemon Email Server version 25.0.1 and below. An attacker can send a specially crafted HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window, and access user data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://mdaemon.com/pages/downloads-critical-updates
CVE: CVE-2025-4058
Published: 2025-04-29
Description: A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroop_process.php. The manipulation of the argument Pat_BloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/hhhanxx/attack/issues/2#issue[PII_REDACTED]; https://vuldb.com/?ctiid.306495; https://vuldb.com/?id.306495
CVE: CVE-2025-4059
Published: 2025-04-29
Description: A vulnerability classified as critical was found in code-projects Prison Management System 1.0. This vulnerability affects the function addrecord of the component Prison_Mgmt_Sys. The manipulation of the argument filename leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-121, CWE-787
References: https://code-projects.org/; https://github.com/zzzxc643/cve/blob/main/Prison_Mgmt_Sys.md; https://vuldb.com/?ctiid.306496
CVE: CVE-2025-4035
Published: 2025-04-29
Description: A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-178
References: https://access.redhat.com/errata/RHSA-2025:8128; https://access.redhat.com/security/cve/CVE-2025-4035; https://bugzilla.redhat.com/show_bug.cgi?id=2362651
CVE: CVE-2025-4060
Published: 2025-04-29
Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /category.php. The manipulation of the argument catname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/Q3qc1n/myCVE/issues/6; https://phpgurukul.com/; https://vuldb.com/?ctiid.306497
CVE: CVE-2025-4061
Published: 2025-04-29
Description: A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function add_item. The manipulation of the argument st.productname leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-121, CWE-787
References: https://code-projects.org/; https://github.com/zzzxc643/cve/blob/main/Clothing_store_mgmt.md; https://vuldb.com/?ctiid.306498
CVE: CVE-2025-2817
Published: 2025-04-29
Description: Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1917536; https://www.mozilla.org/security/advisories/mfsa2025-28/; https://www.mozilla.org/security/advisories/mfsa2025-29/
CVE: CVE-2025-3301
Published: 2025-04-29
Description: DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and software support. A successful DPA attack may result in exposure of confidential information. The best practice is to use the impacted crypto curves and operations with ephemeral keys to reduce the number of DPA traces that can be collected.
CWE: CWE-1255
References: https://community.silabs.com/068Vm00000O8qbY
CVE: CVE-2025-4062
Published: 2025-04-29
Description: A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by this vulnerability is the function cancel. The manipulation of the argument cancelcustomername leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-121, CWE-787
References: https://code-projects.org/; https://github.com/zzzxc643/cve/blob/main/Theatre_booking_System.md; https://vuldb.com/?ctiid.306499
CVE: CVE-2025-4063
Published: 2025-04-29
Description: A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical. Affected by this issue is the function cancel. The manipulation of the argument first_name/last_name leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-121, CWE-787
References: https://code-projects.org/; https://github.com/zzzxc643/cve/blob/main/Student_Info_System.md; https://vuldb.com/?ctiid.306500
CVE: CVE-2025-4064
Published: 2025-04-29
Description: A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/viewenquiry.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-284, CWE-862
References: https://vuldb.com/?ctiid.306501; https://vuldb.com/?id.306501; https://vuldb.com/?submit.559467
CVE: CVE-2025-4082
Published: 2025-04-29
Description: Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges.
*This bug only affects Thunderbird for macOS. Other versions of Thunderbird are unaffected.*. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1937097; https://www.mozilla.org/security/advisories/mfsa2025-28/; https://www.mozilla.org/security/advisories/mfsa2025-29/
CVE: CVE-2025-4083
Published: 2025-04-29
Description: A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-653
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1958350; https://www.mozilla.org/security/advisories/mfsa2025-28/; https://www.mozilla.org/security/advisories/mfsa2025-29/
CVE: CVE-2025-4084
Published: 2025-04-29
Description: Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system.
*This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox ESR 128.10, Firefox ESR 115.23, and Thunderbird 128.10.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-116
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198; https://www.mozilla.org/security/advisories/mfsa2025-29/; https://www.mozilla.org/security/advisories/mfsa2025-30/
CVE: CVE-2025-4085
Published: 2025-04-29
Description: An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
CVSS Score: 7.1 (HIGH)
CWE: CWE-269
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1915280; https://www.mozilla.org/security/advisories/mfsa2025-28/; https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE: CVE-2025-4086
Published: 2025-04-29
Description: A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog.
*This bug only affects Thunderbird for Android. Other versions of Thunderbird are unaffected.*. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-451
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1945705; https://www.mozilla.org/security/advisories/mfsa2025-28/; https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE: CVE-2025-4087
Published: 2025-04-29
Description: A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Thunderbird 138, and Thunderbird 128.10.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1952465; https://www.mozilla.org/security/advisories/mfsa2025-28/; https://www.mozilla.org/security/advisories/mfsa2025-29/
CVE: CVE-2025-4088
Published: 2025-04-29
Description: A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1953521; https://www.mozilla.org/security/advisories/mfsa2025-28/; https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE: CVE-2025-4089
Published: 2025-04-29
Description: Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-77
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198; https://www.mozilla.org/security/advisories/mfsa2025-28/; https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE: CVE-2025-4090
Published: 2025-04-29
Description: A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1929478; https://www.mozilla.org/security/advisories/mfsa2025-28/; https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE: CVE-2025-4091
Published: 2025-04-29
Description: Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Thunderbird 138, and Thunderbird 128.10.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1951161%2C1952105; https://www.mozilla.org/security/advisories/mfsa2025-28/; https://www.mozilla.org/security/advisories/mfsa2025-29/
CVE: CVE-2025-4092
Published: 2025-04-29
Description: Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1924108%2C1950780%2C1959367; https://www.mozilla.org/security/advisories/mfsa2025-28/; https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE: CVE-2025-4093
Published: 2025-04-29
Description: Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 128.10 and Thunderbird 128.10.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1894100; https://www.mozilla.org/security/advisories/mfsa2025-29/; https://www.mozilla.org/security/advisories/mfsa2025-32/
CVE: CVE-2025-4065
Published: 2025-04-29
Description: A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/addadvertisement.php. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-266, CWE-284
References: https://vuldb.com/?ctiid.306502; https://vuldb.com/?id.306502; https://vuldb.com/?submit.559478
CVE: CVE-2025-4066
Published: 2025-04-29
Description: A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/addpackage.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-266, CWE-284
References: https://vuldb.com/?ctiid.306503; https://vuldb.com/?id.306503; https://vuldb.com/?submit.559480
CVE: CVE-2025-4067
Published: 2025-04-29
Description: A vulnerability classified as critical has been found in ScriptAndTools Online-Travling-System 1.0. Affected is an unknown function of the file /admin/viewpackage.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://vuldb.com/?ctiid.306504; https://vuldb.com/?id.306504; https://vuldb.com/?submit.559514
CVE: CVE-2025-1551
Published: 2025-04-29
Description: IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7232032
CVE: CVE-2025-23177
Published: 2025-04-29
Description: CWE-427: Uncontrolled Search Path Element
CVSS Score: 7.6 (HIGH)
CWE: CWE-427
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-23178
Published: 2025-04-29
Description: CWE-923: Improper Restriction of Communication Channel to Intended Endpoints
CVSS Score: 7.6 (HIGH)
CWE: CWE-923
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-23179
Published: 2025-04-29
Description: CWE-798: Use of Hard-coded Credentials
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-798
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-25403
Published: 2025-04-29
Description: Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/coll_type.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/christopherralinanggoman/cve-skripsi/blob/main/my_reports/slims-9-bulian-coll-type-report.md; https://github.com/slims/slims9_bulian/issues/273; https://github.com/christopherralinanggoman/cve-skripsi/blob/main/my_reports/slims-9-bulian-coll-type-report.md
CVE: CVE-2025-25962
Published: 2025-04-29
Description: An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the _modifyPosition function
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269, CWE-284
References: https://github.com/CVEProject/docs/blob/gh-pages/requester/reservation-guidelines.md; https://medium.com/@cnetsec/access-control-vulnerability-in-uniswap-v3-cve-2025-25962-f7cf21536978
CVE: CVE-2025-32354
Published: 2025-04-29
Description: In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the GraphQL endpoint (/service/extension/graphql) of Zimbra webmail due to a lack of CSRF token validation. This allows attackers to perform unauthorized GraphQL operations, such as modifying contacts, changing account settings, and accessing sensitive user data when an authenticated user visits a malicious website.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.4#Security_Fixes; https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
CVE: CVE-2025-40615
Published: 2025-04-29
Description: Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the "TEXTO" parameter in /api/api_ajustes.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-bookgy
CVE: CVE-2025-40616
Published: 2025-04-29
Description: Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the "IDRESERVA" parameter in /bkg_imprimir_comprobante.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-bookgy