CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-46178 |
Description: Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project. This allows remote attackers to inject arbitrary JavaScript in the context of a victim s browser session by sending a crafted URL, leading to session hijacking or defacement.
EPSS Score: 0.04%
June 9th, 2025 (7 days ago)
|
|
CVE-2025-45055 |
Description: Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module. An authenticated user can upload a malicious SVG file as an event attachment, which, when viewed by an administrator, executes embedded JavaScript in the admin's session. This allows attackers to escalate privileges by creating a new administrator account. The vulnerability arises from insufficient sanitization of SVG files and weak CSRF protections.
CVSS: MEDIUM (5.4) EPSS Score: 0.03%
June 9th, 2025 (7 days ago)
|
|
CVE-2025-39539 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quitenicestuff Soho Hotel allows Reflected XSS. This issue affects Soho Hotel: from n/a through 4.2.5.
CVSS: HIGH (7.1) EPSS Score: 0.04%
June 9th, 2025 (7 days ago)
|
|
CVE-2025-39476 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech Revo allows PHP Local File Inclusion. This issue affects Revo: from n/a through 4.0.26.
CVSS: HIGH (7.5) EPSS Score: 0.11%
June 9th, 2025 (7 days ago)
|
|
CVE-2025-39475 |
Description: Path Traversal vulnerability in Frenify Arlo allows PHP Local File Inclusion. This issue affects Arlo: from n/a through 6.0.3.
CVSS: HIGH (8.1) EPSS Score: 0.06%
June 9th, 2025 (7 days ago)
|
|
CVE-2025-39473 |
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebGeniusLab Seofy Core allows PHP Local File Inclusion. This issue affects Seofy Core: from n/a through 1.4.5.
CVSS: HIGH (8.1) EPSS Score: 0.06%
June 9th, 2025 (7 days ago)
|
|
CVE-2025-32595 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Krowd allows PHP Local File Inclusion. This issue affects Krowd: from n/a through 1.4.1.
CVSS: HIGH (8.1) EPSS Score: 0.15%
June 9th, 2025 (7 days ago)
|
|
CVE-2025-32308 |
Description: Missing Authorization vulnerability in looks_awesome Team Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Team Builder: from n/a through 1.5.7.
CVSS: HIGH (7.6) EPSS Score: 0.04%
June 9th, 2025 (7 days ago)
|
|
CVE-2025-32305 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sneeit FlatNews allows Reflected XSS. This issue affects FlatNews: from n/a through 5.8.
CVSS: HIGH (7.1) EPSS Score: 0.04%
June 9th, 2025 (7 days ago)
|
|
CVE-2025-32291 |
Description: Unrestricted Upload of File with Dangerous Type vulnerability in FantasticPlugins SUMO Affiliates Pro allows Using Malicious Files. This issue affects SUMO Affiliates Pro: from n/a through 10.7.0.
CVSS: CRITICAL (10.0) EPSS Score: 0.06% SSVC Exploitation: none
June 9th, 2025 (7 days ago)
|