CVE-2025-15144

creationtimestamp| type| source ---|---|--- 2025-12-28 20:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb373d4wzs2g...

CVE-2025-15144

A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. The impacted element is the function drshowerror/drexitmsg of the file /dayrui/Fcms/Init.php of the component JSONP Callback Handler. This manipulation of the argument callback causes cross site scripting. The attack can be initiated...