CVE-2025-10434

IbuyuCMS up to version 2.6.3 is affected by a cross-site scripting (XSS) vulnerability in the Add Article Page component, specifically via manipulation of the Title argument in /admin/article.php?a=mod. The issue enables remote exploitation and an exploit is publicly available. Remediation: upgra...