CVE-2025-3688

Published Apr 16, 2025

Last updated 2 months ago

CVSS medium 4.8

Overview

Description: A vulnerability, which was classified as problematic, was found in mirweiye Seven Bears Library CMS 2023. This affects an unknown part of the component Background Management Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Source: cna@vuldb.com
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 4.8
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: MEDIUM

CVSS 3.1

Type: Primary
Base score: 2.4
Impact score: 1.4
Exploitability score: 0.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Severity: LOW

CVSS 2.0

Type: Secondary
Base score: 3.3
Impact score: 2.9
Exploitability score: 6.4
Vector string: AV:N/AC:L/Au:M/C:N/I:P/A:N

Weaknesses

cna@vuldb.com: CWE-79

Hype score: Not currently trending

CVE-2025-3688 Cross-Site Scripting in Mirweiye Seven Bears Library CMS 2023 Background Management Page https://t.co/g6NzbHXo7H
@VulmonFeeds
16 Apr 2025
8 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References

Sources include official advisories and independent security research.