CVE-2025-15452: xnx3 wangmarket Backend Variable Search variableList.do variableList cross site scripting
A weakness has been identified in xnx3 wangmarket up to 4.9. This affects the function variableList of the file /admin/system/variableList.do of the component Backend Variable Search. Executing a manipulation of the argument Description can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15452?
CVE-2025-15452 has been classified as a moderate severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2025-15452?
To fix CVE-2025-15452, update xnx3 wangmarket to a version greater than 4.9 that includes patches for the vulnerability.
What systems are affected by CVE-2025-15452?
CVE-2025-15452 affects xnx3 wangmarket versions up to and including 4.9.
What type of vulnerability is CVE-2025-15452?
CVE-2025-15452 is classified as a cross-site scripting (XSS) vulnerability.
What are the risks associated with CVE-2025-15452?
The risks associated with CVE-2025-15452 include unauthorized access, data theft, and potential exploitation of users through malicious scripts.