CNNVD-202512-581 Information

CNNVD ID

CNNVD-202512-581

CVE-2025-14005

  • CNNVD Published: 2025-12-04

Description (Chinese)

xunruicms是XunRuiCMS个人开发者的一个建站框架。 xunruicms 4.7.1及之前版本存在跨站脚本漏洞,该漏洞源于对文件/admind45f74adbd95.php中参数data[name]的错误操作,可能导致跨站脚本。

Description (English)

xunruicms is a framework for the construction of XunruiCMS by individual developers. xunruicals 4.7.1 and previous versions contain a cross-site script loophole, which results from an error in the parameter data [name] in file/admind45f74adbd95.php and may result in a cross-site script.

Hazard Level

Critical

Vulnerability Type

跨站脚本

Affected Vendor

个人开发者

Published

2025-12-04

Last Modified

2026-02-24

References

https://vuldb.com/?submit.692909 https://vuldb.com/?ctiid.334247 https://github.com/24-2021/vul/blob/main/xunruicms-Basic%20Settings-XSS/xunruicms-Basic%20Settings-XSS.md https://vuldb.com/?id.334247

Share on: