Description
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive information.
References (2)
Core 2
Core References
Patch, Third Party Advisory x_refsource_misc
https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4
Exploit, Third Party Advisory x_refsource_misc
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25925
Scores
CVSS v3
5.4
EPSS
0.0019
EPSS Percentile
40.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-79
Status
published
Products (3)
pypi/sickrage
4.2.0 - 10.0.11.dev2PyPI
sickrage/sickrage
10.0.11 (2 CPE variants)
sickrage/sickrage
4.2.0 - 10.0.11
Published
Apr 12, 2021
Tracked Since
Feb 18, 2026