Low severity2.4NVD Advisory· Published Sep 15, 2025· Updated Jun 17, 2026

CVE-2025-10434

Description

A vulnerability was identified in IbuyuCMS up to 2.6.3. Impacted is an unknown function of the file /admin/article.php?a=mod of the component Add Article Page. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Upgradeextension/Ibuyureferences
IbuyuCMS/IbuyuCMSllm-fuzzy
Range: <=2.6.3

Patches

Vulnerability mechanics

References

github.com/Upgradeextension/ibuyu/blob/main/README.mdnvd
vuldb.comnvd
vuldb.comnvd
vuldb.comnvd

News mentions

No linked articles in our index yet.

cvss	0.156
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000