PT-2026-20268 · Unknown · Lty628 Aidigu

Published 2026-02-17 · Updated 2026-03-23 · CVE-2025-70846

Positive Technologies · (AI Summary)

CVSS v3.1

7.1

High

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions lty628 aidigu version 1.9.1

Description The software is susceptible to a Cross Site Scripting (XSS) issue. This affects the /tools/Password/add page, specifically within the password input field. Successful exploitation could allow an attacker to inject malicious scripts.

Recommendations Apply input validation and output encoding to the password field on the /tools/Password/add page.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-70846

Affected Products

Lty628 Aidigu

References · 7

• 🔥 https://github.com/J4cky1028/vulnerability-research/tree/main/CVE-2025-70846 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-70846 · Security Note
• https://github.com/lty628/aidigu · Note
• https://twitter.com/VulmonFeeds/status/2023972174084636960 · Twitter Post
• https://twitter.com/infoflowcloud/status/2036025571298185413 · Twitter Post
• https://twitter.com/CVEnew/status/2036024274826547652 · Twitter Post
• https://t.me/cveNotify/155119 · Telegram Post