PT-2025-31855 · Unknown · Givanz Vvveb

0Xhamy · Published 2025-08-04 · Updated 2025-08-04 · CVE-2025-8521

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions givanz Vvveb versions up to 1.0.5

Description A cross-site scripting issue exists due to unknown processing of the file /vadmin123/index.php?module=settings/post-types within the Add Type Handler component. The attack can be initiated remotely. The exploit has been publicly disclosed.

Recommendations Upgrade to version 1.0.6 to address this issue.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-8521

Affected Products

Givanz Vvveb

References · 11

• 🔥 https://vuldb.com/?submit.625003 · Exploit
• 🔥 https://hkohi.ca/vulnerability/11 · Exploit
• https://github.com/givanz/Vvveb/commit/b53c7161da606f512b7efcb392d6ffc708688d49 · Patch
• https://github.com/givanz/Vvveb/releases/tag/1.0.6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-8521 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8521 · Vendor Advisory
• https://vuldb.com/?ctiid.318647 · Note
• https://twitter.com/CVEnew/status/1952443673171390698 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1952466702194639211 · Twitter Post
• https://t.me/CVEtracker/29121 · Telegram Post
• https://vuldb.com/?id.318647 · Note