CVE-2025-10949

LOW

Changsha Developer Technology iView Editor <1.1.1 - XSS

Title source: llm
STIX 2.1

Description

A vulnerability was found in Changsha Developer Technology iView Editor up to 1.1.1. This impacts an unknown function of the component Markdown Handler. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4
Core References
Permissions Required, VDB Entry vdb-entry
https://vuldb.com/?id.325819
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.325819
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.652402

Scores

CVSS v3 2.4
EPSS 0.0025
EPSS Percentile 15.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-79 CWE-94
Status published
Products (2)
Changsha Developer Technology/iView Editor 1.1.0
Changsha Developer Technology/iView Editor 1.1.1
Published Sep 25, 2025
Tracked Since Feb 18, 2026