CVE-2025-2131

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-2131

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2131.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-2131

Published

2025-03-09T23:15:34.397Z

Modified

2026-03-15T22:52:05.815595Z

Severity

4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

A vulnerability was found in dayrui XunRuiCMS up to 4.6.3. It has been rated as problematic. This issue affects some unknown processing of the component Friendly Links Handler. The manipulation of the argument Website Address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

References

Affected packages

Git / github.com/dayrui/xunruicms

Affected ranges

Type

GIT

Repo

https://github.com/dayrui/xunruicms

Events

Introduced

Last affected

547234d52c276cbcf1c7d63f75b5c2b9b231b7d4

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.6.3"
        }
    ]
}

Affected versions

4.*

4.3.13

4.6.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2131.json"