CVE-2025-8976 - givanz Vvveb Endpoint post cross site scripting

Back Back to CVE browser

MEDIUM

givanz Vvveb Endpoint post cross site scripting

Published Aug 14, 2025

5.1

MEDIUM

CVSS 4.0

EPSS 0.29%

Description

A vulnerability has been found in givanz Vvveb up to 1.0.5. This vulnerability affects unknown code of the file /vadmin123/index.php?module=content/post&type=post of the component Endpoint. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. It is recommended to upgrade the affected component.

Affected products

Vendor Givanz Product Vvveb Default
n/a
- Version
  1.0.0
  Status
  affected
  Constraints
  -
- Version
  1.0.1
  Status
  affected
  Constraints
  -
- Version
  1.0.2
  Status
  affected
  Constraints
  -
- Version
  1.0.3
  Status
  affected
  Constraints
  -
- Version
  1.0.4
  Status
  affected
  Constraints
  -
- Version
  1.0.5
  Status
  affected
  Constraints
  -
- Version
  1.0.6
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Givanz

Vvveb

n/a

Version	Status	Constraints
1.0.0	affected	-
1.0.1	affected	-
1.0.2	affected	-
1.0.3	affected	-
1.0.4	affected	-
1.0.5	affected	-
1.0.6	unaffected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-79

Cross-site Scripting (XSS)

CWE-94

Code Injection

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24937
Advisory
https://github.com/givanz/Vvveb/releases/tag/1.0.6
patchRelease Notes
https://hkohi.ca/vulnerability/7
exploitThird Party Advisory
https://vuldb.com/?ctiid.319972
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.319972
vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.628297
exploitthird-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24937		Advisory
https://github.com/givanz/Vvveb/releases/tag/1.0.6		patchRelease Notes
https://hkohi.ca/vulnerability/7		exploitThird Party Advisory
https://vuldb.com/?ctiid.319972		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.319972		vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.628297		exploitthird-party-advisoryThird Party AdvisoryVDB Entry