3 matches found
CVE-2025-25990
Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component...
6.1CVSS0.00281EPSS
SaveExploits1References1
CVE-2025-25988
Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the custom Link title parameter and the Title parameter...
4.8CVSS0.00269EPSS
SaveExploits1References1
CVE-2025-25990: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component...
6.1CVSS5.9AI score0.00281EPSS
SaveExploits1References1
20