PT-2025-26444 · Unknown · Code-Projects Responsive Blog

Yunlin · Published 2025-06-20 · Updated 2025-07-11 · CVE-2025-6353

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: code-projects Responsive Blog version 1.0

Description: A problematic issue exists in code-projects Responsive Blog 1.0. The vulnerability affects an unknown functionality within the /search.php file. Manipulation of the argument keyword can lead to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations: code-projects Responsive Blog version 1.0: Sanitize or properly encode the argument keyword within the /search.php file to prevent cross site scripting.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2025-6353

Affected Products

Code-Projects Responsive Blog

References · 12

• 🔥 https://github.com/asd1238525/cve/blob/main/xss2.md#poc · Exploit
• 🔥 https://github.com/asd1238525/cve/blob/main/xss2.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-6353 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6353 · Security Note
• https://twitter.com/CVEnew/status/1936110492378108352 · Twitter Post
• https://vuldb.com/?submit.597260 · Note
• https://code-projects.org · Note
• https://t.me/cvetracker/26678 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1936295130647978462 · Twitter Post
• https://vuldb.com/?ctiid.313345 · Note
• https://t.me/cvenotify/128515 · Telegram Post
• https://vuldb.com/?id.313345 · Note