medium5.9
CVE-2025-45661
A cross-site scripting (XSS) vulnerability in miniTCG v1.3.1 beta allows attackers to execute abritrary web scripts or HTML via injecting a crafted payload int…
Impact
A cross-site scripting (XSS) vulnerability in miniTCG v1.3.1 beta allows attackers to execute abritrary web scripts or HTML via injecting a crafted payload into the id parameter at /members/edit.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Heavenspell | Minitcg | Version 1.3.1 |