CVE-2025-15249

LOW

3.5

Description

A weakness has been identified in zhujunliang3 work_platform up to 6bc5a50bb527ce27f7906d11ea6ec139beb79c31. This vulnerability affects unknown code of the component Content Handler. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

CVE Details

CVSS v3.1 Score3.5

SeverityLOW

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredLOW

User InteractionREQUIRED

Published12/30/2025

Last Modified12/31/2025

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-79CWE-94

References

https://gitee.com/zhujunliang3/work_platform/issues/ICLUJ2(cna@vuldb.com)

https://vuldb.com/?ctiid.338639(cna@vuldb.com)

https://vuldb.com/?id.338639(cna@vuldb.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.