Vulnerability · Published Mar 22, 2025 · Assigned by VulDB
CVE-2025-2616yangyouwang 杨有旺 crud 简约后台管理系统 Role Management Page cross site scripting
Low 2.4
In plain English
A low-severity cross-site scripting in crud 简约后台管理系统 from yangyouwang 杨有旺. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 3.1)2.4Low
Exploit odds (30 days)0.3%top 74.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability classified as problematic has been found in yangyouwang 杨有旺 crud 简约后台管理系统 1.0.0. Affected is an unknown function of the component Role Management Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| yangyouwang 杨有旺 | crud 简约后台管理系统 | 1.0.0 |
Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
References
- VDB-300618 | yangyouwang 杨有旺 crud 简约后台管理系统 Role Management Page cross site scripting vdb-entry
- VDB-300618 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- Submit #518962 | 杨有旺 简约后台管理系统 v1.0.0 XSS third-party-advisory
- https://gitee.com/yangyouwang/crud/issues/IBSPOX exploit, issue-tracking