CVE-2018-25157

MEDIUM

Phraseanet 4.0.3 - Authenticated Stored Cross-Site Scripting via Document Upload

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-25157. PoCs published by Krzysztof Szulski.

AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Phraseanet DAM software. By uploading a file with a crafted name containing malicious JavaScript, an attacker can execute arbitrary scripts in the context of a user's session.

Description

Phraseanet 4.0.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through crafted file names during document uploads. Attackers can upload files with embedded SVG scripts that execute in the browser, potentially stealing cookies or redirecting users when the file is viewed.

Exploits (1)

exploitdb WORKING POC
by Krzysztof Szulski · textwebappsmultiple
https://www.exploit-db.com/exploits/46935

This exploit demonstrates a stored XSS vulnerability in Phraseanet DAM software. By uploading a file with a crafted name containing malicious JavaScript, an attacker can execute arbitrary scripts in the context of a user's session.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Phraseanet DAM Open Source software 4.0.3 (4.0.4-dev) and below
Auth required
Prerequisites: Access to upload functionality in Phraseanet DAM software
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/46935
Various Sources product
https://www.phraseanet.com
Various Sources product
https://www.phraseanet.com/en/download/

Scores

CVSS v3 6.4
EPSS 0.0004
EPSS Percentile 12.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (3)
phraseanet/phraseanet Packagist
Phraseanet/Phraseanet DAM Open Source 4.0.4-dev
Phraseanet/Phraseanet DAM Open Source <= 4.0.3
Published Feb 11, 2026
Tracked Since Feb 18, 2026