CVE-2025-3253

The CVE-2025-3253 entry applies to xujiangfei admintwo 1.0, where the /ztree/insertTree endpoint’s Name parameter can be manipulated to trigger cross-site scripting. The issue can be exploited remotely, and public disclosures exist. No patch/version fix is specified in the provided documents; det...