PT-2025-46773 · Unknown · Bitplatform Boilerplate

Published 2025-11-13 · Updated 2025-11-13 · CVE-2025-64710

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Bitplatform Boilerplate versions prior to 9.11.3

Description Bitplatform Boilerplate, a Visual Studio and .NET project template, contains a cross-site scripting (XSS) issue within the WebInteropApp/WebAppInterop component. This could allow attackers to inject malicious scripts, potentially compromising the security and integrity of web applications built using this template. Applications utilizing this Bitplatform Boilerplate may also be at risk.

Recommendations Update to version 9.11.3 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-64710

GHSA-RV95-XJ37-7C3W

Affected Products

Bitplatform Boilerplate

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64710.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-64710 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64710 · Security Note
• https://github.com/bitfoundation/bitplatform/commit/4700894ab90ed3a94cbfa21ebea3c0b5de87d457 · Note
• https://github.com/bitfoundation/bitplatform/security/advisories/GHSA-rv95-xj37-7c3w · Note
• https://twitter.com/VulmonFeeds/status/1988905378260619557 · Twitter Post
• https://twitter.com/CVEnew/status/1988820404228816896 · Twitter Post
• https://t.me/CVEtracker/37199 · Telegram Post
• https://t.me/cveNotify/142618 · Telegram Post