CVE-2025-4292

CVE-2025-4292 affects MRCMS 3.1.3. The vulnerability lies in the Edit User Page component: manipulating the Username parameter in /admin/user/edit.do enables cross-site scripting. The issue can be exploited remotely and exploits have been publicly disclosed. Several sources (NVD, Red Hat, OSV, et...

CVE-2025-4292 MRCMS Edit User Page edit.do cross site scripting

A vulnerability has been found in MRCMS 3.1.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/user/edit.do of the component Edit User Page. The manipulation of the argument Username leads to cross site scripting. The attack can be...