Vulnerability · Published Mar 27, 2025 · Assigned by FSOFT
CVE-2025-31165Cross Site Scripting in NightWolf Penetration Platform
Medium 6.9
In plain English
A medium-severity cross-site scripting in NightWolf Penetration Platform from FPT Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 4.0)6.9Medium
Exploit odds (30 days)0.4%top 69.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Cross-Site Scripting (XSS) vulnerability in the Logbug module of NightWolf Penetration Testing Platform 1.2.2 allows attackers to execute JavaScript through the markdown editor feature.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| FPT Software | NightWolf Penetration Platform | 1.2.2 |
Weakness: CWE-79 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N