CVE-2025-15416

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-15416

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15416.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-15416

Published

2026-01-01T23:15:55.977Z

Modified

2026-03-14T12:41:47.924275Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the file /siteVar/save.do of the component Add Global Variable Handler. The manipulation of the argument Remark/Variable Value results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

Affected packages

Git / github.com/xnx3/wangmarket

Affected ranges

Type

GIT

Repo

https://github.com/xnx3/wangmarket

Events

Introduced

Last affected

735c6e34a16edd00eb069e578e7fda0fd09cec18

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.4"
        }
    ]
}

Affected versions

v4.*

v4.10

v4.11

v4.3

v4.5

v4.6

v4.7

v4.7.1

v4.8

v5.*

v5.0

v5.1

v5.2

v5.4

v5.7

v6.*

v6.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15416.json"