CVE-2025-10434

IbuyuCMS up to version 2.6.3 is affected by a cross-site scripting (XSS) vulnerability in the Add Article Page component, specifically via manipulation of the Title argument in /admin/article.php?a=mod. The issue enables remote exploitation and an exploit is publicly available. Remediation: upgra...

PT-2025-37460

Name of the Vulnerable Software and Affected Versions: IbuyuCMS versions up to 2.6.3 Description: A vulnerability exists in IbuyuCMS that allows for cross site scripting. The issue is located in the Add Article Page component, specifically within the file /admin/article.php?a=mod. Manipulation of...