← All advisories

Medium severity5.4NVD Advisory· Published Feb 20, 2025· Updated Jun 17, 2026

CVE-2025-25958

CVE-2025-25958

Description

Cross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via a crafted script.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Phpcms/Phpcms2 versions
cpe:2.3:a:phpcms:phpcms:9.6.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpcms:phpcms:9.6.3:*:*:*:*:*:*:*
- (no CPE)range: =9.6.3
phpcmsv9/phpcmsv9description

Patches

Vulnerability mechanics

References

1

github.com/Abel-Lan/phpcms/issues/1nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.