Unknown · Studio Hyperset The Great Firewords Of China · CVE-2025-22771
**Name of the Vulnerable Software and Affected Versions**
Studio Hyperset The Great Firewords of China versions n/a through 1.2
**Description**
The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page.
**Recommendations**
For versions n/a through 1.2, consider disabling any features that allow user input to be directly reflected in web pages until a proper fix is available. Restrict access to sensitive areas of the web application to minimize the risk of exploitation. Avoid using user-supplied input in API endpoints, such as `/api/user/profile`, until the issue is resolved. As a temporary workaround, consider implementing additional validation and sanitization for all user input to prevent malicious scripts from being injected.