CVE-2025-61319

creationtimestamp| type| source ---|---|--- 2025-10-10 03:00:06+00:00| published-proof-of-concept| Telegram/TFgIrRyFVdmt-iXx8f0LX8Ka84NvNMzkX0RvLq3uNFE64w 2025-10-12 21:02:42+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw3z4mz2p...

CVE-2025-61319

ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can b...