CVE-2025-67025: XSS
Published Jan 15, 2026
·Updated
Cross Site Scripting vulnerability in Anycomment anycomment.io 0.4.4 allows a remote attacker to execute arbitrary code via the Anycomment comment section
Affected Software
2 affected components
Anycomment Anycomment
Anycomment anycomment.io=0.4.4
Event History
Jan 15, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-67025?
CVE-2025-67025 has a high severity rating due to its potential for remote code execution via Cross Site Scripting.
2
How do I fix CVE-2025-67025?
To fix CVE-2025-67025, update Anycomment to the latest version where the vulnerability has been patched.
3
Who is affected by CVE-2025-67025?
Any user of Anycomment version 0.4.4 is affected by CVE-2025-67025.
4
What type of vulnerability is CVE-2025-67025?
CVE-2025-67025 is a Cross Site Scripting vulnerability that allows attackers to execute arbitrary code.
5
Can CVE-2025-67025 lead to data breaches?
Yes, if exploited, CVE-2025-67025 can lead to severe data breaches and unauthorized access to sensitive information.