CVE-2025-13058

Katalog CVE

CVSS 5.4 · Medium EPSS 0,27%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada extplorer. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of the component Filename Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The patch is identified as 002def70b985f7012586df2c44368845bf405ab3. Applying a patch is advised to resolve this issue.

Rincian

Terbit di NVD

12 November 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 18,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/soerennb/extplorer/commit/002def70b985f7012586df2c44368845bf405ab3 patch
• https://vuldb.com/?id.332185 advisory pihak ketiga · pemerintah AS
• https://vuldb.com/?submit.682370 advisory pihak ketiga · pemerintah AS
• https://github.com/soerennb/extplorer/issues/33 exploit · issue tracking
• https://github.com/soerennb/extplorer/
• https://vuldb.com/?ctiid.332185 permissions required · vdb entry