CVE-2025-14006: dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting
A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validation Page. The manipulation of the argument data[name] leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14006?
CVE-2025-14006 is classified as a medium severity vulnerability affecting the XunRuiCMS software.
How do I fix CVE-2025-14006?
To fix CVE-2025-14006, upgrade to the latest version of XunRuiCMS beyond 4.7.1 where the issue is resolved.
What component is affected by CVE-2025-14006?
CVE-2025-14006 affects the Add Data Validation Page component within the XunRuiCMS.
What versions of XunRuiCMS are impacted by CVE-2025-14006?
CVE-2025-14006 impacts all versions of XunRuiCMS up to and including version 4.7.1.
What type of vulnerability is CVE-2025-14006?
CVE-2025-14006 is a security vulnerability that allows for manipulation of certain parameters in the application.