PT-2025-22403 · Seeddms · Seeddms

Simon Njuguna · Published 2025-05-21 · Updated 2025-12-27 · CVE-2025-45754

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SeedDMS version 6.0.32

Description A stored cross-site scripting (XSS) issue exists, allowing an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name.

Recommendations For SeedDMS version 6.0.32, consider restricting the ability to create documents with arbitrary names to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-45754

Affected Products

Seeddms

References · 5

• 🔥 https://simonjuguna.com/cve-2025-45754-stored-cross-site-scripting-xss-vulnerability-in-seeddms-v6-0-32 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-45754 · Security Note
• https://osv.dev/vulnerability/CVE-2025-45754 · Vendor Advisory
• https://t.me/cvenotify/126625 · Telegram Post
• https://twitter.com/CVEnew/status/2005031821294162211 · Twitter Post