PT-2025-47313 · Windu Cms · Windu Cms

Karol Czubernat · Published 2025-11-18 · Updated 2025-12-05 · CVE-2025-59115

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Windu CMS version 4.1 Windu CMS (affected versions not specified)

Description Windu CMS is susceptible to Stored Cross-Site Scripting (XSS) in the logon page due to inadequate input validation. A malicious actor can inject arbitrary HTML and JavaScript code into the website. This injected code will be rendered and executed when an administrator visits the logs page.

Recommendations Apply appropriate input validation to all user-supplied data on the logon page.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-59115

Affected Products

Windu Cms

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-59115 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59115 · Vendor Advisory
• https://t.me/CVEtracker/37623 · Telegram Post
• https://cert.pl/posts/2025/11/CVE-2025-59110 · Note
• https://windu.org · Note
• https://twitter.com/CVEnew/status/1990786245232861505 · Twitter Post
• https://t.me/cveNotify/144868 · Telegram Post