CVE-2025-3253

creationtimestamp| type| source ---|---|--- 2025-04-04 15:36:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10464 2025-04-04 17:07:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyvpybtmo2i 2025-04-04 20:32:03+00:00| seen|...

CVE-2025-3253 xujiangfei admintwo insertTree cross site scripting

A vulnerability was found in xujiangfei admintwo 1.0 and classified as problematic. This issue affects some unknown processing of the file /ztree/insertTree. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-3253 xujiangfei admintwo insertTree cross site scripting

A vulnerability was found in xujiangfei admintwo 1.0 and classified as problematic. This issue affects some unknown processing of the file /ztree/insertTree. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-3253

The CVE-2025-3253 entry applies to xujiangfei admintwo 1.0, where the /ztree/insertTree endpoint’s Name parameter can be manipulated to trigger cross-site scripting. The issue can be exploited remotely, and public disclosures exist. No patch/version fix is specified in the provided documents; det...