atjiu pybbs list cross site scripting
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 4.8epss 0.6%
da publicação à arma0 dias
Publicada no NVD5 de ago.
1ª PoC5 de ago.
probabilidade de exploração
0.6%top 53% das CVEs
exploração observada
nãonenhuma fonte reporta
3 exploit(s) público(s)
A vulnerability was found in atjiu pybbs up to 6.0.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/topic/list. The manipulation of the argument Username leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a patch to fix this issue.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
atjiu · pybbsPoCs públicas encontradas — 3
exploitdbwww.exploit-db.com/exploits/52400não verificadogithubgithub.com/byteReaper77/CVE-2025-8550★ 3cve_referencegithub.com/atjiu/pybbs/issues/203#issue-3256392964não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22https://github.com/atjiu/pybbs/issues/203https://github.com/atjiu/pybbs/issues/203#issue-3256392964https://github.com/atjiu/pybbs/issues/203#issuecomment-3134774288https://vuldb.com/?ctiid.318679https://vuldb.com/?id.318679https://vuldb.com/?submit.622194