atjiu pybbs list cross site scripting
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 4.8epss 0.6%
de la publicación al arma0 días
Publicada en NVD5 ago
1ª PoC5 ago
probabilidad de explotación
0.6%top 53% de las CVE
explotación observada
noninguna fuente lo reporta
3 exploit(s) público(s)
A vulnerability was found in atjiu pybbs up to 6.0.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/topic/list. The manipulation of the argument Username leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a patch to fix this issue.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Productos afectados
atjiu · pybbsPoCs públicas encontradas — 3
exploitdbwww.exploit-db.com/exploits/52400no verificadogithubgithub.com/byteReaper77/CVE-2025-8550★ 3cve_referencegithub.com/atjiu/pybbs/issues/203#issue-3256392964no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22https://github.com/atjiu/pybbs/issues/203https://github.com/atjiu/pybbs/issues/203#issue-3256392964https://github.com/atjiu/pybbs/issues/203#issuecomment-3134774288https://vuldb.com/?ctiid.318679https://vuldb.com/?id.318679https://vuldb.com/?submit.622194