PT-2025-26430 · Unknown · Code-Projects Responsive Blog

0Xcaptainfahim · Published 2025-06-20 · Updated 2025-07-11 · CVE-2025-6347

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: code-projects Responsive Blog versions 1.0, 1.12.4, and 3.3.4

Description: A cross-site scripting issue exists in code-projects Responsive Blog. The vulnerability affects unknown code within the /responsive/resblog/blogadmin/admin/pageViewMembers.php file. Remote attackers can exploit this issue. The exploit is publicly available.

Recommendations: code-projects Responsive Blog version 1.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability. code-projects Responsive Blog version 1.12.4: At the moment, there is no information about a newer version that contains a fix for this vulnerability. code-projects Responsive Blog version 3.3.4: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-6347

Affected Products

Code-Projects Responsive Blog

References · 11

• 🔥 https://gist.github.com/0xCaptainFahim/8bb9021dcea33863eaf0279aaca2671c · Exploit
• https://osv.dev/vulnerability/CVE-2025-6347 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6347 · Security Note
• https://twitter.com/CVEnew/status/1936097319692517878 · Twitter Post
• https://vuldb.com/?ctiid.313342 · Note
• https://twitter.com/CVEnew/status/1936103884000207093 · Twitter Post
• https://t.me/cvenotify/128514 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1936108304402444432 · Twitter Post
• https://vuldb.com/?submit.595676 · Note
• https://vuldb.com/?id.313342 · Note
• https://code-projects.org · Note