CVE-2025-8550mediumCWE-79CWE-94

CVE-2025-8550: fallo de gravedad media en atjiu pybbs

atjiu pybbs list cross site scripting

Publicada el

Seguir esta CVE+ Monitorear pybbs

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

33Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 4.8epss 0.7%
de la publicación al armael mismo día
Publicada en NVD5 ago
1ª PoC5 ago
A vulnerability was found in atjiu pybbs up to 6.0.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/topic/list. The manipulation of the argument Username leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a patch to fix this issue.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Productos afectados
atjiu · pybbs
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — atjiu pybbs

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-8548MEDIUMatjiu pybbs Registered Email SettingsApiController.java sendEmailCode information exposureEPSS 0.6%CVE-2025-8546MEDIUMatjiu pybbs Verification Code login CaptchaEPSS 0.5%CVE-2025-8549MEDIUMatjiu pybbs UserAdminController.java update weak passwordEPSS 0.5%CVE-2025-8547MEDIUMatjiu pybbs Email Verification improper authorizationEPSS 0.5%CVE-2025-8814MEDIUMatjiu pybbs CookieUtil.java setCookie cross-site request forgeryEPSS 0.4%CVE-2025-8812MEDIUMatjiu pybbs Admin Panel settings cross site scriptingEPSS 0.4%