CVE-2025-15416: xnx3 wangmarket Add Global Variable save.do cross site scripting
A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the file /siteVar/save.do of the component Add Global Variable Handler. The manipulation of the argument Remark/Variable Value results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15416?
The severity of CVE-2025-15416 is categorized as a high risk due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-15416?
To fix CVE-2025-15416, upgrade the xnx3 wangmarket software to a version above 6.4 that addresses this vulnerability.
What type of vulnerability is CVE-2025-15416?
CVE-2025-15416 is classified as a cross-site scripting (XSS) vulnerability.
Which systems are affected by CVE-2025-15416?
CVE-2025-15416 affects all versions of xnx3 wangmarket up to and including version 6.4.
Can CVE-2025-15416 be exploited remotely?
Yes, CVE-2025-15416 can be exploited remotely by attackers through the manipulation of specific arguments in the affected software.