Lucene search
K

CVE-2025-2123 GeSHi CSS cssgen.php get_var cross site scripting

šŸ—“ļøĀ 09 Mar 2025Ā 15:00:12Reported byĀ VulDBTypeĀ 
cvelist
Ā cvelist
šŸ”—Ā www.cve.orgšŸ‘Ā 16Ā Views

Vulnerability in GeSHi allows cross site scripting via cssgen.php function get_var.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-2123
9 Mar 202515:37
–circl
CNNVD
GeSHi ä»£ē ę³Øå…„ę¼ę“ž
9 Mar 202500:00
–cnnvd
CVE
CVE-2025-2123
9 Mar 202515:00
–cve
Debian CVE
CVE-2025-2123
9 Mar 202515:00
–debiancve
EUVD
EUVD-2025-7508
3 Oct 202520:07
–euvd
Github Security Blog
GeSHi XSS possible in the get_var function of /contrib/cssgen.php
9 Mar 202515:31
–github
NVD
CVE-2025-2123
9 Mar 202515:15
–nvd
OSV
DEBIAN-CVE-2025-2123
9 Mar 202515:15
–osv
OSV
GHSA-PR6Q-G5GV-QGR7 GeSHi XSS possible in the get_var function of /contrib/cssgen.php
9 Mar 202515:31
–osv
OSV
UBUNTU-CVE-2025-2123
9 Mar 202515:15
–osv
Rows per page
[
  {
    "vendor": "n/a",
    "product": "GeSHi",
    "versions": [
      {
        "version": "1.0.9.0",
        "status": "affected"
      },
      {
        "version": "1.0.9.1",
        "status": "affected"
      }
    ],
    "modules": [
      "CSS Handler"
    ]
  }
]

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Mar 2025 15:00Current
CVSS 3.13.5
CVSS 33.5
CVSS 24
CVSS 45.1
EPSS0.00193
16