CVE-2025-5378 - Astun Technology iShare Maps mycouncil2.aspx cross site scripting

Back Back to CVE browser

MEDIUM

Astun Technology iShare Maps mycouncil2.aspx cross site scripting

Published May 31, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.36%

Description

A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown part of the file mycouncil2.aspx. The manipulation of the argument atTxtStreet leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Astun Technology Product iShare Maps Default
n/a
- Version
  5.4.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Astun Technology

iShare Maps

n/a

Version	Status	Constraints
5.4.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-79

Cross-site Scripting (XSS)

CWE-94

Code Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16563
Advisory
https://vuldb.com/?ctiid.310671
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.310671
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.582841
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16563		Advisory
https://vuldb.com/?ctiid.310671		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.310671		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.582841		third-party-advisoryThird Party AdvisoryVDB Entry