CVE-2025-57692: XSS
Published Sep 26, 2025
·Updated
PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.
Affected Software
3 affected components
PiranhaCMS PiranhaCMS
nuget/Piranha<=12.0
Dotnetfoundation Piranha Cms=12.0
Event History
Sep 26, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·09:30 PM
Data Sourced
via GitHub·09:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-57692?
CVE-2025-57692 is considered a high severity vulnerability due to its ability to execute arbitrary JavaScript in a user's browser.
2
How do I fix CVE-2025-57692?
To fix CVE-2025-57692, update PiranhaCMS to a version higher than 12.0 that addresses the stored XSS vulnerability.
3
What type of vulnerability is CVE-2025-57692?
CVE-2025-57692 is a stored cross-site scripting (XSS) vulnerability.
4
Where can CVE-2025-57692 be exploited?
CVE-2025-57692 can be exploited in the Text content block of Standard and Standard Archive Pages via the /manager/pages endpoint.
5
Who is affected by CVE-2025-57692?
CVE-2025-57692 affects users of PiranhaCMS version 12.0 and below.