PT-2025-39392 · Changsha Developer Technology · Iview Editor

Suc2Es2 · Published 2025-09-25 · Updated 2025-09-25 · CVE-2025-10949

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Changsha Developer Technology iView Editor versions up to 1.1.1

Description A flaw exists in the Markdown Handler component of the software that allows for cross site scripting. The issue is remotely exploitable and details of the exploit are publicly available. The vendor was notified but did not respond.

Recommendations Update to a version beyond 1.1.1.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-10949

Affected Products

Iview Editor

References · 8

• 🔥 https://github.com/duckpigdog/CVE/blob/main/iView%20Editor%20XSS.docx · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10949 · Security Note
• https://vuldb.com/?submit.652402 · Note
• https://twitter.com/CVEnew/status/1971226590366584903 · Twitter Post
• https://vuldb.com/?ctiid.325819 · Note
• https://t.me/CVEtracker/33323 · Telegram Post
• https://t.me/cveNotify/136407 · Telegram Post
• https://vuldb.com/?id.325819 · Note