CVE-2025-0871 - Maybecms Add Article index.php cross site scripting

Back Back to CVE browser

MEDIUM

Maybecms Add Article index.php cross site scripting

Published Jan 30, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.32%

Description

A vulnerability classified as problematic has been found in Maybecms 1.2. This affects an unknown part of the file /mb/admin/index.php?u=article-edit of the component Add Article. The manipulation of the argument data_info[content] leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor n/a Product Maybecms Default
n/a
- Version
  1.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Maybecms

n/a

Version	Status	Constraints
1.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-79

Cross-site Scripting (XSS)

CWE-94

Code Injection

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1906
Advisory
https://github.com/Upgradeextension/Maybecms/blob/main/README.md
broken-linkexploitpatch
https://vuldb.com/?ctiid.294057
signaturepermissions-required
https://vuldb.com/?id.294057
vdb-entrytechnical-description
https://vuldb.com/?submit.487930
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1906		Advisory
https://github.com/Upgradeextension/Maybecms/blob/main/README.md		broken-linkexploitpatch
https://vuldb.com/?ctiid.294057		signaturepermissions-required
https://vuldb.com/?id.294057		vdb-entrytechnical-description
https://vuldb.com/?submit.487930		third-party-advisory