PT-2025-52683 · Publiccms · Publiccms

Hyperkopite + 1 · Published 2025-12-22 · Updated 2025-12-22 · CVE-2025-65837

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PublicCMS version 5.202506.b

Description PublicCMS version 5.202506.b has a Cross Site Scripting (XSS) issue in the Content Search module. The issue allows for the injection of malicious scripts through the Content Search functionality. The vulnerable component is the Content Search module.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-65837

Affected Products

Publiccms

References · 6

• 🔥 https://github.com/sanluan/PublicCMS/issues/100 · Exploit
• 🔥 https://github.com/Hyperkopite/PublicCMS_Vulns/blob/main/XSS_1.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-65837 · Security Note
• https://osv.dev/vulnerability/CVE-2025-65837 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2003237151438168343 · Twitter Post
• https://twitter.com/CVEnew/status/2003198627615785190 · Twitter Post