Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Javaalpha

#52244of 53,608
4Total CVSS
Vulnerabilities · 1
PT-2025-54174
4.0
2025-12-30
Sunhailin12315 · Product-Review 商品评价系统 · CVE-2025-15248
**Name of the Vulnerable Software and Affected Versions** sunhailin12315 product-review 商品评价系统 versions up to 91ead6890b4065bb45b7602d0d73348e75cb4639 **Description** A security flaw exists in the sunhailin12315 product-review 商品评价系统. The issue is related to cross site scripting, which can be triggered by manipulating the `content` argument within the Write a Review component. This allows for remote execution of malicious scripts. The exploit has been publicly released. The project maintainers were notified of the issue but have not yet responded. **Recommendations** Versions up to 91ead6890b4065bb45b7602d0d73348e75cb4639 should be updated when a fix becomes available. As a temporary workaround, consider sanitizing the `content` input to prevent script injection.