CVE-2025-9755

MEDIUM

khanakag-17 library_management_system < 2025-08-23 - Cross-Site Scripting via msg Parameter

Title source: llm
STIX 2.1

Description

A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24. This affects an unknown function of the file /index.php. The manipulation of the argument msg leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.322056
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.322056
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.640660

Scores

CVSS v3 4.3
EPSS 0.0036
EPSS Percentile 27.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-79 CWE-94
Status published
Products (1)
khanakag-17/library_management_system < 2025-08-23
Published Sep 01, 2025
Tracked Since Feb 18, 2026