Medium severity6.1NVD Advisory· Published Jan 8, 2026· Updated Apr 15, 2026

CVE-2019-25280

Description

Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML code through the 'speed' GET parameter. Attackers can inject malicious HTML code in the 'speed' parameter of prober.php to trigger cross-site scripting in user browser sessions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Yahei-PHP/PHP Proberllm-create
Range: = 0.4.7

Patches

Vulnerability mechanics

References

cxsecurity.com/issue/WLB-2019070132nvd
exchange.xforce.ibmcloud.com/vulnerabilities/164412nvd
packetstormsecurity.com/files/153756nvd
web.archive.org/web/20190623143100/http://www.yahei.net/nvd
www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5531.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000