Unrated severityNVD Advisory· Published Jan 15, 2025· Updated Jan 15, 2025
Fanli2012 native-php-cms sysconfig_doedit.php cross site scripting
CVE-2025-0485
Description
A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been classified as problematic. Affected is an unknown function of the file /fladmin/sysconfig_doedit.php. The manipulation of the argument info leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
21.0+ 1 more
- (no CPE)range: 1.0
- (no CPE)range: 1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/Fanli2012/native-php-cms/issues/7mitreexploitissue-tracking
- vuldb.commitrethird-party-advisory
- github.com/Fanli2012/native-php-cms/issues/7mitreissue-tracking
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
News mentions
0No linked articles in our index yet.