medium6.8
CVE-2025-57692
PiranhaCMS stored XSS
Impact
PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | Piranha | <= 12.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dotnetfoundation | Piranha Cms | Version 12.0 |