CVE-2025-3251

A vulnerability, which was classified as problematic, was found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manipulation of the argument motto leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclose...

admintwo code injection vulnerability

admintwo is an application by the individual developer xujiangfei. A code injection vulnerability exists in admintwo version 1.0, which stems from a cross-site scripting error in the motto parameter...

CVE-2025-3251: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manipulation of the argument motto leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclose...

PT-2025-14905

Name of the Vulnerable Software and Affected Versions xujiangfei admintwo version 1.0 Description A problematic issue was found in xujiangfei admintwo, affecting an unknown part of the file /user/updateSet. The manipulation of the motto argument leads to cross-site scripting. It is possible to...

Newsletter < 6.7.7 - Authenticated Stored Cross-Site Scripting

An Authenticated Stored Cross-Site Scripting XSS was discovered within the Company Info "Motto" field. When creating a new newsletter using an empty template with the header module, the XSS would execute. This was later fixed in version: 6.7.7 PoC...