PT-2025-38622 · Unknown · Paracrawl Keops V2

Shaunak Chatterjee · Published 2025-09-19 · Updated 2025-09-20 · CVE-2025-56762

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Paracrawl KeOPs v2 (affected versions not specified)

Description Paracrawl KeOPs v2 is susceptible to a Cross-Site Scripting (XSS) issue in the error.php file. This allows for the injection of malicious scripts into the application, potentially compromising user data or system integrity. The vulnerability resides in the handling of input within the error.php file, enabling attackers to execute arbitrary JavaScript code in the context of a user's browser. The error.php file is the entry point for the XSS attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-56762

Affected Products

Paracrawl Keops V2

References · 9

• 🔥 https://github.com/Shaunak-Chatterjee/CVE-2025-56762 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-56762 · Security Note
• https://osv.dev/vulnerability/CVE-2025-56762 · Vendor Advisory
• https://github.com/paracrawl/keops · Note
• https://twitter.com/UndercodeUpdate/status/1969458730531000663 · Twitter Post
• https://t.me/CVEtracker/32979 · Telegram Post
• https://t.me/cveNotify/136026 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1969194533314252981 · Twitter Post
• https://twitter.com/CVEnew/status/1969291953498964369 · Twitter Post