← back
CVE-2025-3795

DaiCuo SEO Optimization Settings Section cross site scripting

CVSS 4.8 MEDIUMEPSS 0.3%CWE-79CWE-94
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
18 Apr 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability was found in DaiCuo 1.3.13. It has been rated as problematic. Affected by this issue is some unknown functionality of the component SEO Optimization Settings Section. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
n/a · DaiCuo
References
https://github.com/daicuo/cms/issues/1https://vuldb.com/?ctiid.305648https://vuldb.com/?id.305648https://vuldb.com/?submit.554639