Swagger UI 1.0.3 - Cross-Site Scripting (XSS)

/ Author : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-8191 Title : Swagger UI 1.0.3 - Cross-Site Scripting XSS Description : CVE-2025-8191, a vulnerability in the Swagger UI service due to poor description parameter filtering, leading to command execution on a remote server. / include...

CVE-2025-8191

A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross site scripting. It is possible to launch the...

CVE-2025-8191

creationtimestamp| type| source ---|---|--- 2025-07-28 09:00:04+00:00| published-proof-of-concept| Telegram/wJ83KA27ztpgm6UQkZJH3SyvZ1BG2eAKAV4286gCNH98w4 2025-07-28 19:00:09+00:00| published-proof-of-concept| Telegram/75Mb5uYpQosCyupAbaPXt3tVtlvlDXKkJ2DuCinTsyRQAIk 2025-08-03 06:15:33+00:00| see...

Exploit for CVE-2025-8191

CVE-2025-8191 – Swagger UI XSS Injection Description :...