Medium severity6.1NVD Advisory· Published Nov 5, 2025· Updated Jun 17, 2026
CVE-2025-63418
CVE-2025-63418
Description
A DOM-based Cross-Site Scripting (XSS) vulnerability in the SelfBest platform 2023.3 allows attackers to execute arbitrary JavaScript in the context of a logged-in user's session by injecting payloads via the browser's developer console. The vulnerability arises from the application's client-side code being susceptible to direct DOM manipulation without adequate sanitization or a Content Security Policy (CSP), potentially leading to account takeover and data theft.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- SelfBest platform/SelfBest platformdescription
Patches
Vulnerability mechanics
References
1- rohitchaudhary045.medium.com/cve-2025-63418-weaponizing-the-browser-console-a-dom-based-xss-deep-dive-25ed3ac9cb53nvdExploitMitigationThird Party Advisory
News mentions
0No linked articles in our index yet.