Medium severity6.1NVD Advisory· Published Dec 22, 2025· Updated Jun 17, 2026

CVE-2025-67443

Description

Schlix CMS before v2.2.9-5 is vulnerable to Cross Site Scripting (XSS). Due to lack of javascript sanitization in the login form, incorrect login attempts in logs are triggered as XSS in the admin panel.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Schlix/CMS2 versions
cpe:2.3:a:schlix:cms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:schlix:cms:*:*:*:*:*:*:*:*range: <2.2.9-5
- (no CPE)range: <2.2.9-5
Schlix CMS/Schlix CMSdescription

Patches

Vulnerability mechanics

References

gist.github.com/akinerkisa/b22f4517a4011d049c5fc7fd3b29c9f2nvdThird Party Advisory
www.schlix.com/news/release/december-2025-errata-5-bug-fix-release.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000