Lucene search
+L

2 matches found

RedhatCVE
RedhatCVE
added 2026/01/15 7:24 p.m.10 views

CVE-2025-71165

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php...

5.4CVSS5.7AI score0.00194EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/01/14 6:28 p.m.5 views

CVE-2025-71165

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php...

5.4CVSS5.6AI score0.00194EPSS
SaveExploits1References4
Rows per page
Query Builder