CVE-2025-60837: XSS
A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60837?
CVE-2025-60837 is classified as a medium severity vulnerability due to its potential to allow attackers to execute arbitrary JavaScript in a user's browser.
How do I fix CVE-2025-60837?
To mitigate CVE-2025-60837, update to MCMS version 6.0.2 or later, which addresses this reflected cross-site scripting vulnerability.
What types of attacks can CVE-2025-60837 enable?
CVE-2025-60837 can enable attackers to perform various malicious actions, including session hijacking and data theft, through crafted JavaScript payloads.
Who is affected by CVE-2025-60837?
CVE-2025-60837 affects users of MCMS version 6.0.1, particularly those who interact with vulnerable web pages.
Is there a workaround for CVE-2025-60837 if I cannot update immediately?
While the best solution is to update, you can implement input validation and output encoding to help mitigate the effects of CVE-2025-60837 until an update can be applied.