CVE-2025-2123
- Source
- https://cve.org/CVERecord?id=CVE-2025-2123
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2123.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-2123
- Aliases
- Downstream
- Published
- 2025-03-09T15:00:12.269Z
- Modified
- 2026-07-15T01:48:55.272343145Z
- Severity
-
- 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- GeSHi CSS cssgen.php get_var cross site scripting
- Details
-
A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var of the file /contrib/cssgen.php of the component CSS Handler. The manipulation of the argument default-styles/keywords-1/keywords-2/keywords-3/keywords-4/comments leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
- Database specific
{ "cna_assigner": "VulDB", "cwe_ids": [ "CWE-79", "CWE-94" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/2xxx/CVE-2025-2123.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/2xxx/CVE-2025-2123.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-2123
- https://vuldb.com/?id.299036
- https://vuldb.com/?submit.507418
- https://github.com/GeSHi/geshi-1.0/issues/159
- https://github.com/GeSHi/geshi-1.0/issues/159#issue-2880408694
- https://vuldb.com/?ctiid.299036
Affected packages
Git / github.com/geshi/geshi-1.0
Affected ranges
- Type
- GIT
- Repo
- https://github.com/geshi/geshi-1.0
- Events
-
IntroducedLast affected
- Database specific
{ "source": [ "AFFECTED_FIELD", "CPE_RANGE" ], "extracted_events": [ { "introduced": "1.0.9.0" }, { "last_affected": "1.0.9.0" }, { "introduced": "1.0.9.1" }, { "last_affected": "1.0.9.1" }, { "introduced": "0" } ], "cpe": "cpe:2.3:a:qbnz:geshi:*:*:*:*:*:*:*:*" }