CVE-2025-24967: Stored XSS on Admin Panel When Deleting a User in reNgine
First published: Tue Feb 04 2025(Updated: )
reNgine is an automated reconnaissance framework for web applications. A stored cross-site scripting (XSS) vulnerability exists in the admin panel's user management functionality. An attacker can exploit this issue by injecting malicious payloads into the username field during user creation. This vulnerability allows unauthorized script execution whenever the admin views or interacts with the affected user entry, posing a significant risk to sensitive admin functionalities. This issue affects all versions up to and including 2.20. Users are advised to monitor the project for future releases which address this issue. There are no known workarounds.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| reNgine | <=2.20 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2025-24967?
CVE-2025-24967 is classified as a medium severity vulnerability due to its potential for stored cross-site scripting attacks.
How do I fix CVE-2025-24967?
To fix CVE-2025-24967, update reNgine to version 2.21 or later, which mitigates the XSS vulnerability in the admin panel.
What types of attacks does CVE-2025-24967 enable?
CVE-2025-24967 enables attackers to execute arbitrary scripts in the context of a user's browser through stored XSS.
Which versions of reNgine are affected by CVE-2025-24967?
Versions of reNgine up to and including 2.20 are affected by CVE-2025-24967.
Can CVE-2025-24967 be exploited remotely?
Yes, CVE-2025-24967 can be exploited remotely by an attacker with access to inject payloads into the username field in the admin panel.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/rengine
- canonical/rengine