CVE-2025-10710: 07FLYCMS/07FLY-CMS/07FlyCRM index.php cross site scripting
A flaw has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This affects an unknown part of the file /index.php. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product is published under multiple names. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10710?
CVE-2025-10710 is classified as a critical vulnerability due to its capability of enabling remote cross-site scripting attacks.
How do I fix CVE-2025-10710?
To fix CVE-2025-10710, upgrade your 07FLYCMS, 07FLY-CMS, or 07FlyCRM to a version released after 20250831.
What types of systems are affected by CVE-2025-10710?
CVE-2025-10710 affects 07FLYCMS, 07FLY-CMS, and 07FlyCRM versions up to 20250831.
Can CVE-2025-10710 be exploited remotely?
Yes, CVE-2025-10710 can be exploited remotely, allowing attackers to perform cross-site scripting.
What file is involved in CVE-2025-10710?
CVE-2025-10710 involves a flaw in the file /index.php.