CVE-2025-25908

creationtimestamp| type| source ---|---|--- 2025-03-10 23:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2qml6o6i2n 2025-03-11 00:54:08+00:00| seen| https://t.me/cvedetector/20004 2025-03-11 04:41:13+00:00| seen| Telegram/4mACg6LuCuirrI4ktRIYzQ12EjgokkRm5YeOhwEsLUBNH9pz...

CVE-2025-25908

A stored cross-site scripting XSS vulnerability in tianti v2.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the coverImageURL parameter at /article/ajax/save...