Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/02/13 7:22 a.m.•30 views

CVE-2025-70845

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS exists in the /setting/ page where the "intro" field is not properly sanitized or escaped...

6.1CVSS5.4AI score0.00238EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/12 10:16 p.m.•43 views

CVE-2025-70845

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS exists in the /setting/ page where the "intro" field is not properly sanitized or escaped...

6.1CVSS0.00238EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/12 12:00 a.m.•14 views

CVE-2025-70845

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS exists in the /setting/ page where the "intro" field is not properly sanitized or escaped...

5.4AI score0.00238EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/12 12:00 a.m.•46 views

CVE-2025-70845

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS exists in the /setting/ page where the "intro" field is not properly sanitized or escaped...

0.00238EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/12 12:00 a.m.•48 views

CVE-2025-70845

The open-source Weibo project lty628 aidigu version v1.9.1 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the insufficient cleaning and escaping of the "intro" field on the /setting/ page. This vulnerability allows for the execution of malicious scripts in the context of the user...

6.1CVSS5.8AI score0.00238EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/12 12:00 a.m.•25 views

PT-2026-7907

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS exists in the /setting/ page where the "intro" field is not properly sanitized or escaped...

5.4AI score0.00238EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/12 12:00 a.m.•20 views

aidigu 安全漏洞

Aidigu is an open-source Weibo project developed by SR. Li lty628 as a personal project. Version 1.9.1 of Aidigu contains a security vulnerability. This vulnerability stems from insufficient cleaning and escaping of the intro field in the /setting/ page, which may lead to cross-site scripting...

6.1CVSS5.6AI score0.00238EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/12 12:00 a.m.•6 views

CVE-2025-70845: Improper Neutralization of Input During Web Page Generation

lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting XSS exists in the /setting/ page where the "intro" field is not properly sanitized or escaped...

6.1CVSS5.8AI score0.00238EPSS
SaveExploits0References1
Rows per page
Query Builder