medium5.4Public exploit code
CVE-2025-46041
A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page description field in the p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS)2025-06-15 · webapps · php
Impact
A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page description field in the page creation interface (/admin/pages/add).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Anchorcms | Anchor Cms | Version 0.12.7 |