CVE-2025-45778

A stored cross-site scripting (XSS) vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2025-08-01

Last modified

2025-12-01

Weaknesses

CWE-79

Affected products

• The Language Sloth (Languagesloth)

References

• https://languagesloth.com/
• https://packetstorm.news/files/id/206262