CVE-2025-55473

The Asian Arts Talents Foundation (AATF) Website (v5.1.x) and its Docker image (version 2024.12.8.1) are vulnerable to Cross-Site Scripting (XSS) . The flaw resides in the /ip.php endpoint, which fails to properly sanitize or encode the X-Forwarded-For HTTP header. An attacker can exploit this by...