CVE-2025-67290: XSS
A stored cross-site scripting (XSS) vulnerability in the Page Settings module of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Excerpt field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67290?
CVE-2025-67290 is categorized as a stored cross-site scripting (XSS) vulnerability, posing a moderate to high risk depending on the context of exploitation.
How do I fix CVE-2025-67290?
To fix CVE-2025-67290, upgrade Piranha CMS to version 12.1 or later where the vulnerability is resolved.
What is the impact of CVE-2025-67290?
CVE-2025-67290 allows attackers to inject and execute arbitrary web scripts or HTML within the application, potentially compromising user data and session integrity.
Which versions of Piranha CMS are affected by CVE-2025-67290?
CVE-2025-67290 affects Piranha CMS versions prior to 12.1.
How can I mitigate CVE-2025-67290 if I cannot update?
If you cannot update to version 12.1 or later, ensure input sanitization and validation in the Excerpt field to prevent XSS attacks.