PT-2025-26444 · Unknown · Code-Projects Responsive Blog

Yunlin · Publicado 2025-06-20 · Atualizado 2025-07-11 · CVE-2025-6353

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: code-projects Responsive Blog version 1.0

Description: A problematic issue exists in code-projects Responsive Blog 1.0. The vulnerability affects an unknown functionality within the /search.php file. Manipulation of the argument keyword can lead to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations: code-projects Responsive Blog version 1.0: Sanitize or properly encode the argument keyword within the /search.php file to prevent cross site scripting.

Exploit

Correção

Code Injection

XSS

Enumeração de Fraquezas

CWE-94

CWE-79

Identificadores relacionados

CVE-2025-6353

Produtos afetados

Code-Projects Responsive Blog

Referências · 12

• 🔥 https://github.com/asd1238525/cve/blob/main/xss2.md#poc · Exploit
• 🔥 https://github.com/asd1238525/cve/blob/main/xss2.md · Exploit
• https://twitter.com/CVEnew/status/1936110492378108352 · Publicação no Twitter
• https://vuldb.com/?submit.597260 · Nota
• https://code-projects.org · Nota
• https://t.me/cvetracker/26678 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1936295130647978462 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-6353 · Aviso do Fabricante
• https://vuldb.com/?ctiid.313345 · Nota
• https://t.me/cvenotify/128515 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-6353 · Nota de Segurança
• https://vuldb.com/?id.313345 · Nota