Vulnerability · Published Nov 13, 2025 · Assigned by GitHub_M

CVE-2025-64710Bitplatform Boilerplate has cross-site scripting vulnerability

Medium 5.3

In plain English

A medium-severity cross-site scripting in bitplatform from bitfoundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 4.0)5.3Medium

Exploit odds (30 days)0.3%top 72.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting (XSS) vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compromise the security and integrity of web applications. Applications based on this Bitplatform Boilerplate might also be vulnerable. Version 9.11.3 fixes the issue.

Affected products (as reported)

Vendor	Product	Versions
bitfoundation	bitplatform	< 9.11.3

Weakness: CWE-79 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

References

https://github.com/bitfoundation/bitplatform/security/advisories/GHSA-rv95-xj37-7c3w x_refsource_CONFIRM
https://github.com/bitfoundation/bitplatform/commit/4700894ab90ed3a94cbfa21ebea3c0b5de87d457 x_refsource_MISC