CVE-2025-8847: yangzongzhuan RuoYi edit cross site scripting
A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is the function Edit of the file /system/notice/edit. The manipulation of the argument noticeTitle/noticeContent leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8847?
The severity of CVE-2025-8847 is classified as high due to its potential for remote cross-site scripting attacks.
How do I fix CVE-2025-8847?
To fix CVE-2025-8847, upgrade to a version of yangzongzhuan RuoYi that is newer than 4.8.1 and ensure proper input validation for noticeTitle and noticeContent.
Who is affected by CVE-2025-8847?
CVE-2025-8847 affects users of yangzongzhuan RuoYi versions up to and including 4.8.1.
Can CVE-2025-8847 be exploited remotely?
Yes, CVE-2025-8847 can be exploited remotely through manipulated arguments in the Edit function.
What kind of attack is possible with CVE-2025-8847?
CVE-2025-8847 allows for cross-site scripting (XSS) attacks through vulnerable input fields.