CVE-2025-61319: XSS
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can be abused to steal session cookies, perform unauthorized actions, or compromise the ReNgine administrator's account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61319?
CVE-2025-61319 is classified as a high severity vulnerability due to its potential for arbitrary JavaScript execution in user browsers.
How do I fix CVE-2025-61319?
To fix CVE-2025-61319, upgrade ReNgine to a version higher than 2.2.0, which addresses the stored XSS vulnerability.
What is the impact of CVE-2025-61319?
The impact of CVE-2025-61319 includes potential unauthorized actions performed by attackers on behalf of users due to arbitrary script execution.
Which versions of ReNgine are affected by CVE-2025-61319?
CVE-2025-61319 affects all versions of ReNgine up to and including 2.2.0.
Is CVE-2025-61319 an easy vulnerability to exploit?
Yes, CVE-2025-61319 is relatively easy to exploit if the attacker can inject an XSS payload into the target being scanned.