CVE-2025-0708: fumiao opencms Add Model Management Page addOrUpdate cross site scripting

First published: Fri Jan 24 2025(Updated: )

A vulnerability was found in fumiao opencms 2.2. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/model/addOrUpdate of the component Add Model Management Page. The manipulation of the argument 模板前缀 leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Credit: cna@vuldb.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/mitre-cve
• source/MITRE
• agent/weakness
• agent/title
• agent/references
• agent/description
• agent/type
• agent/first-publish-date
• agent/guess-ai
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• agent/softwarecombine
• collector/nvd-api
• source/NVD
• agent/severity
• agent/author
• agent/last-modified-date
• agent/source
• agent/tags
• agent/event