Vulnerability · Published Apr 18, 2025 · Assigned by VulDB
CVE-2025-3795DaiCuo SEO Optimization Settings Section cross site scripting
Low 2.4
In plain English
A low-severity cross-site scripting in DaiCuo. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Severity (CVSS 3.1)2.4Low
Exploit odds (30 days)0.4%top 67.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in DaiCuo 1.3.13. It has been rated as problematic. Affected by this issue is some unknown functionality of the component SEO Optimization Settings Section. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
References
- VDB-305648 | DaiCuo SEO Optimization Settings Section cross site scripting vdb-entry
- VDB-305648 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- Submit #554639 | DaiCuoCms DaiCuoCms article manage system 1.3.13 Cross Site Scripting third-party-advisory
- https://github.com/daicuo/cms/issues/1 exploit, issue-tracking