CVE-2025-60655

CVE-2025-60655 - Remote Code Execution RCE via Unrestricted Upload | ---|--- Researchers| DotAdrien Severity| 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Software| Script Pag Description A critical vulnerability in the image upload system allows for Remote Code Execution RCE. The...

CVE-2025-60654

CVE-2025-60654 - Stored Cross-Site Scripting XSS in Ad Description | ---|--- Researchers| DotAdrien Severity| 7.2 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Software| Script Pag Description The ad description field is vulnerable to stored Cross-Site Scripting XSS. Although some security...

CVE-2025-60656

CVE-2025-60656 - Stored Cross-Site Scripting XSS on Homepage | ---|--- Researchers| DotAdrien Severity| 8.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Software| Script Pag Description A stored Cross-Site Scripting XSS vulnerability exists on the homepage via the "Recent Ads" module. The...