CVE-2025-25957

Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script...

CVE-2025-25957

Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script...

CVE-2025-25957

CVE-2025-25957 affects Xunruicms up to version 4.6.3. The issue is a Cross Site Scripting vulnerability that allows a remote attacker to escalate privileges via a crafted script. Root cause is a XSS in the Xunruicms core/exposed components (per multiple sources). Impact stated as privilege escala...