CVE-2025-3806

CVE-2025-3806 affects dazhouda lecms up to version 3.0.3. The vulnerability resides in the Edit Profile Handler’s /admin functionality and enables cross-site scripting, with remote exploitation and a publicly disclosed exploit. Several connected sources confirm the issue and indicate affected ver...

CVE-2025-3806 dazhouda lecms Edit Profile admin cross site scripting

A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3. Affected by this issue is some unknown functionality of the file /admin of the component Edit Profile Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. T...

CVE-2025-3806 dazhouda lecms Edit Profile admin cross site scripting

A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3. Affected by this issue is some unknown functionality of the file /admin of the component Edit Profile Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. T...