CVE-2025-2131

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-2131

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2131.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-2131

Published

2025-03-09T22:31:04Z

Modified

2026-08-12T03:51:18Z

Severity

4.8 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

dayrui XunRuiCMS Friendly Links cross site scripting

Details

A vulnerability was found in dayrui XunRuiCMS up to 4.6.3. It has been rated as problematic. This issue affects some unknown processing of the component Friendly Links Handler. The manipulation of the argument Website Address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/2xxx/CVE-2025-2131.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "4.6.0"
                },
                {
                    "last_affected": "4.6.0"
                },
                {
                    "introduced": "4.6.1"
                },
                {
                    "last_affected": "4.6.1"
                },
                {
                    "introduced": "4.6.2"
                },
                {
                    "last_affected": "4.6.2"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/dayrui/xunruicms

Affected ranges

Type

GIT

Repo

https://github.com/dayrui/xunruicms

Events

Introduced

547234d52c276cbcf1c7d63f75b5c2b9b231b7d4

Last Affected

547234d52c276cbcf1c7d63f75b5c2b9b231b7d4

Database specific

Show details

{
    "cpe": "cpe:2.3:a:xunruicms:xunruicms:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.6.3"
        },
        {
            "last_affected": "4.6.3"
        },
        {
            "introduced": "0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

4.*

4.6.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2131.json"