CVE-2025-4495

CVE-2025-4495 affects JAdmin-JAVA JAdmin 1.0. The vulnerability lies in the /memoAjax/save endpoint where manipulating the ID parameter enables cross-site scripting. Descriptions across multiple sources indicate the attack can be launched remotely and that the exploit has been disclosed publicly....

CVE-2025-4494

CVE-2025-4494 affects JAdmin-JAVA JAdmin 1.0, specifically the toLogin function in NoNeedLoginController.java within Admin Backend. The vulnerability enables improper authentication and can be exploited remotely; public exploits have been disclosed. Connected sources corroborate the issue and des...