CVE-2025-3962 withstars Books-Management-System Comment add cross site scripting

A vulnerability classified as problematic was found in withstars Books-Management-System 1.0. This vulnerability affects unknown code of the file /api/comment/add of the component Comment Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated...

CVE-2025-3962 withstars Books-Management-System Comment add cross site scripting

A vulnerability classified as problematic was found in withstars Books-Management-System 1.0. This vulnerability affects unknown code of the file /api/comment/add of the component Comment Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated...

CVE-2025-3962

The CVE-2025-3962 entry affects withstars Books-Management-System 1.0, specifically the /api/comment/add endpoint in the Comment Handler. A cross-site scripting flaw is triggered by manipulating the content argument, enabling remote exploitation. Multiple sources confirm the vulnerability and not...

CVE-2025-3961 withstars Books-Management-System do cross site scripting

A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0. This affects an unknown part of the file /admin/article/add/do. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-3961

CVE-2025-3961 concerns withstars Books-Management-System v1.0. The vulnerability is a cross-site scripting (XSS) flaw in the /admin/article/add/do endpoint, triggered by manipulating the Title parameter. Exploitation can be initiated remotely; multiple sources confirm the issue affects an unmaint...

CVE-2025-3961 withstars Books-Management-System do cross site scripting

A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0. This affects an unknown part of the file /admin/article/add/do. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-3960

A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched...

CVE-2025-3960

A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched...

CVE-2025-3960 withstars Books-Management-System Background Interface allreaders.html authorization

A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched...

CVE-2025-3960 withstars Books-Management-System Background Interface allreaders.html authorization

A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched...

CVE-2025-3960

CVE-2025-3960 affects withstars Books-Management-System 1.0. The vulnerability is in the file /allreaders.html of the Background Interface, where missing authorization enables remote access. Exploitation is possible over the network and has been publicly disclosed. The issue is associated with pr...

CVE-2025-3959

A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /readerdelete.html. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploi...

CVE-2025-3959

A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /readerdelete.html. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploi...

CVE-2025-3959

Summary : CVE-2025-3959 affects withstars Books-Management-System 1.0. The issue is a cross-site request forgery (CSRF) in an unknown functionality of the file /reader_delete.html. The vulnerability can be triggered remotely and the exploit has been disclosed publicly. It seems to impact only pro...

CVE-2025-3959 withstars Books-Management-System reader_delete.html cross-site request forgery

A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /readerdelete.html. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploi...

CVE-2025-3959 withstars Books-Management-System reader_delete.html cross-site request forgery

A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /readerdelete.html. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploi...

CVE-2025-3958

A vulnerability was found in withstars Books-Management-System 1.0. It has been classified as problematic. Affected is an unknown function of the file /bookeditdo.html of the component Book Edit Page. The manipulation of the argument Name leads to cross site scripting. It is possible to launch th...

CVE-2025-3958

A vulnerability was found in withstars Books-Management-System 1.0. It has been classified as problematic. Affected is an unknown function of the file /bookeditdo.html of the component Book Edit Page. The manipulation of the argument Name leads to cross site scripting. It is possible to launch th...

CVE-2025-3958

CVE-2025-3958 affects withstars Books-Management-System 1.0. The vulnerability resides in an unknown function of the file /book_edit_do.html in the Book Edit Page, where manipulation of the Name parameter triggers cross-site scripting (XSS). It is described as remotely exploitable and publicly di...

CVE-2025-3958 withstars Books-Management-System Book Edit Page book_edit_do.html cross site scripting

A vulnerability was found in withstars Books-Management-System 1.0. It has been classified as problematic. Affected is an unknown function of the file /bookeditdo.html of the component Book Edit Page. The manipulation of the argument Name leads to cross site scripting. It is possible to launch th...