CVE-2025-41356

Summary: CVE-2025-41356 is a reflected XSS vulnerability in Anon Proxy Server v0.104, impacting the host parameter in the /diagconnect.php endpoint. An attacker can trick a victim into clicking a malicious URL, causing JavaScript execution in the user’s browser and potential data theft (e.g., ses...

CVE-2025-41357

The CVE-2025-41357 entry describes a Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104, affecting the host parameter in the /diagdns.php endpoint. The vulnerability allows an attacker to craft a malicious URL that, when visited by a user, executes JavaScript in the vi...

CVE-2025-41355

CVE-2025-41355 describes a reflected XSS in Anon Proxy Server v0.104. The vulnerability affects the /anon.php endpoint, specifically the port and proxyPort parameters, allowing an attacker to craft a malicious URL that executes JavaScript in the victim’s browser. Consequences include potential le...