Medium severity5.4NVD Advisory· Published Jun 9, 2025· Updated Jul 5, 2026

CVE-2025-46041

Description

A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page description field in the page creation interface (/admin/pages/add).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Anchor CMS/Anchor CMSdescription
Anchorcms/Anchor CMSllm-fuzzy
Range: =0.12.7

Patches

Vulnerability mechanics

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000