CVE-2025-29746: XSS
Published May 7, 2025
·Updated
Cross Site Scripting vulnerability in Koillection v.1.6.10 allows a remote attacker to escalate privileges via the collection, Wishlist and album components
Affected Software
3 affected componentsFixes available
Koillection Koillection
composer/koillection/koillection<1.6.12
1.6.12
Benjaminjonard Koillection=1.6.10
Event History
May 7, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 PM
Affected Software
Advisory Published
via GitHub·09:31 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-29746?
CVE-2025-29746 has a medium severity level due to its capability to allow remote attackers to escalate privileges.
2
How do I fix CVE-2025-29746?
To fix CVE-2025-29746, upgrade Koillection to version 1.6.12 or later.
3
What components of Koillection are affected by CVE-2025-29746?
CVE-2025-29746 affects the collection, Wishlist, and album components of Koillection.
4
Can CVE-2025-29746 lead to data breaches?
Yes, CVE-2025-29746 can potentially lead to data breaches by enabling privilege escalation for attackers.
5
Is there a patch available for CVE-2025-29746?
Yes, a patch is available by upgrading to Koillection version 1.6.12.