CVE-2025-51662: XSS
A stored cross-site scripting (XSS) vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers of any users who try to access the infected codebox by clicking link or entering share code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-51662?
The severity of CVE-2025-51662 is classified as high due to the potential for remote code execution via stored cross-site scripting.
How do I fix CVE-2025-51662?
To fix CVE-2025-51662, upgrade to FileCodeBox version 2.3 or later, which includes enhanced input validation.
What versions of FileCodeBox are affected by CVE-2025-51662?
FileCodeBox versions 2.2 and earlier are affected by CVE-2025-51662.
What type of vulnerability is CVE-2025-51662?
CVE-2025-51662 is a stored cross-site scripting (XSS) vulnerability.
Can CVE-2025-51662 be exploited remotely?
Yes, CVE-2025-51662 can be exploited remotely, allowing attackers to execute arbitrary JavaScript code in users' browsers.