PT-2025-30189 · Unknown · Zavy86 Wikidocs

Matans · Published 2025-07-20 · Updated 2025-07-21 · CVE-2025-7887

Positive Technologies · (AI Summary)

CVSS v2.0

5.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions:

Zavy86 WikiDocs versions through 1.0.78

Description:

A vulnerability exists in Zavy86 WikiDocs, potentially allowing for cross site scripting. The issue is located in the file `template.inc.php` and involves manipulation of the `path` argument. The attack can be initiated remotely. The exploit has been publicly disclosed.

Recommendations:

Versions prior to 1.0.78 should be updated.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2025-7887

Affected Products

Zavy86 Wikidocs

References · 12

• 🔥 https://github.com/Zavy86/WikiDocs/issues/256#issue-3201516458 · Exploit
• 🔥 https://github.com/Zavy86/WikiDocs/issues/256 · Exploit
• 🔥 https://github.com/Zavy86/WikiDocs/issues/256#issuecomment-3034714777 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7887 · Security Note
• https://vuldb.com/?submit.609063 · Note
• https://vuldb.com/?ctiid.317002 · Note
• https://twitter.com/CVEnew/status/1946900512420298755 · Twitter Post
• https://vuldb.com/?id.317002 · Note
• https://t.me/cvenotify/129600 · Telegram Post
• https://t.me/cvenotify/129687 · Telegram Post
• https://t.me/cvetracker/28263 · Telegram Post
• https://twitter.com/marcin_brz81183/status/1946929562295632070 · Twitter Post