> CVE-2025-4379

« BACK_TO_HOME
PUBLISHED
2025-05-23 10:15
MODIFIED
2025-05-23 15:54
EPSS (Prob. Exploit)
0.50%
Top 56.8%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-11

> DESCRIPTION

DobryCMS in versions 2.* and lower is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in szukaj parameter allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened. A hotfix for affected versions was released on 29.04.2025. It removes the vulnerability without incrementing the version.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-r45v-2289-jgr4 MODERATE

Liferay Portal has stored cross-site scripting (XSS) vulnerability

AFFECTED PACKAGES:
MAVEN / com.liferay.portal:com.liferay.portal.impl
< 99.0.0
Fixed in: 99.0.0

> HISTORIQUE DES MODIFICATIONS

Première apparition
23/05/2025 10:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:04
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME