CVE-2025-2616

LOW

crud 1.0.0 - Cross-Site Scripting in Role Management Page

Title source: llm
STIX 2.1

Description

A vulnerability classified as problematic has been found in yangyouwang 杨有旺 crud 简约后台管理系统 1.0.0. Affected is an unknown function of the component Role Management Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

References (4)

Core 4
Core References
Permissions Required, VDB Entry vdb-entry
https://vuldb.com/?id.300618
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.300618
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.518962
Issue Tracking exploit issue-tracking
https://gitee.com/yangyouwang/crud/issues/IBSPOX

Scores

CVSS v3 2.4
EPSS 0.0012
EPSS Percentile 30.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-79 CWE-94
Status published
Products (1)
yangyouwang 杨有旺/crud 简约后台管理系统 1.0.0
Published Mar 22, 2025
Tracked Since Feb 18, 2026