PT-2025-44010 · Pi-Hole · Pi-Hole Admin Interface

F4Bz1993 · Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-32785

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Pi-hole Admin Interface versions prior to 6.3

Description The Pi-hole Admin Interface, a web interface for managing the Pi-hole advertisement and internet tracker blocking application, is susceptible to a cross-site scripting (XSS) issue. This occurs through the Address field within the Subscribed Lists group management section. An authenticated user can introduce malicious JavaScript code by adding a payload to the Address field during the creation or modification of a list entry. The vulnerability is activated when another user accesses the Tools section and initiates a gravity database update. The Address field lacks adequate input sanitization, permitting special characters and script tags to circumvent validation.

Recommendations Versions prior to 6.3 should be updated to version 6.3.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-32785

GHSA-7W6H-3GWC-QHQ5

Affected Products

Pi-Hole Admin Interface

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32785.json · Exploit
• https://github.com/pi-hole/web/security/advisories/GHSA-7w6h-3gwc-qhq5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-32785 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32785 · Security Note
• https://t.me/CVEtracker/35872 · Telegram Post