CNNVD-202508-331 Information

Aug 05, 2025 cve

CNNVD ID

CNNVD-202508-331

CVE-2025-8554

CNNVD Published: 2025-08-05

Description (Chinese)

pybbs是iuiu个人开发者的一个Java开发的社区平台。 pybbs 6.0.0及之前版本存在代码注入漏洞，该漏洞源于文件/admin/user/list中参数Username处理不当，可能导致跨站脚本攻击。

Description (English)

Pybbs is a community platform developed by Java, an iuiu personal developer. The pybbs 6.0.0 and previous versions have a code-injecting loophole, which stems from the inappropriate handling of the parameter Username in the file/admin/user/list, which could lead to a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

个人开发者

Published

2025-08-05

Last Modified

2026-02-24

References

https://github.com/atjiu/pybbs/issues/207 https://github.com/atjiu/pybbs/issues/207#issue-3256426074 https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22 https://vuldb.com/?ctiid.318683 https://vuldb.com/?submit.622198 https://vuldb.com/?id.318683 https://github.com/atjiu/pybbs/issues/207#issuecomment-3134773217 https://access.redhat.com/security/cve/cve-2025-8554 https://nvd.nist.gov/vuln/detail/CVE-2025-8554

Share on: