CVE-2025-0871
A vulnerability classified as problematic has been found in Maybecms 1.2. This affects an unknown part of the file /mb/admin/index.php?u=article-edit of the component Add Article. The manipulation of the argument data_info[content] leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
- Score
- CVSS 4.0 5.3 Medium
- Status
- Deferred - cna@vuldb.com
- Published
- 2025-01-30
- Last modified
- 2025-02-12
- Weaknesses
- CWE-79, CWE-94
References
- https://github.com/Upgradeextension/Maybecms/blob/main/README.md
- https://vuldb.com/?ctiid.294057
- https://vuldb.com/?id.294057
- https://vuldb.com/?submit.487930
