CVE-2025-48236

Published May 19, 2025

Last updated a month ago

Overview

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bunny.net bunny.net allows Stored XSS. This issue affects bunny.net: from n/a through 2.3.0.
Source: audit@patchstack.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.5
Impact score: 4.7
Exploitability score: 3.1
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Severity: HIGH

Weaknesses

audit@patchstack.com: CWE-79

Hype score: Not currently trending

[CVE-2025-48236: HIGH] Critical Stored XSS vulnerability in https://t.co/0jiNMh0lEk (versions n/a-2.3.0) exposes users to cyber attacks. Update immediately to protect against potential breaches.#cve,CVE-2025-48236,#cybersecurity https://t.co/a6dhyimuPD https://t.co/9Ur17sZQ11
@CveFindCom
19 May 2025
45 Impressions
0 Retweets
1 Like
0 Bookmarks
1 Reply
0 Quotes

References

Sources include official advisories and independent security research.