medium6.1
CVE-2025-25957
Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script.
Impact
Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xunruicms | Xunruicms | through 4.6.3 |