medium6.1
CVE-2025-25960
Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the backg…
Impact
Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpcms | Phpcms | Version 9.6.3 |