logo_clicknbuy.png

CVE-2025-8555 – Atjiu Pybbs Cross-Site Scripting Vulnerability

The following table lists the changes that have been made to the
CVE-2025-8555 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Aug. 05, 2025

    Action Type Old Value New Value
    Added Description A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. Affected is an unknown function of the file /search. The manipulation of the argument keyword leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a patch to fix this issue.
    Added CVSS V4.0 AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    Added CVSS V3.1 AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
    Added CVSS V2 (AV:N/AC:L/Au:S/C:N/I:P/A:N)
    Added CWE CWE-79
    Added CWE CWE-94
    Added Reference https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22
    Added Reference https://github.com/atjiu/pybbs/issues/208
    Added Reference https://github.com/atjiu/pybbs/issues/208#issue-3256435530
    Added Reference https://github.com/atjiu/pybbs/issues/208#issuecomment-3134772931
    Added Reference https://vuldb.com/?ctiid.318684
    Added Reference https://vuldb.com/?id.318684
    Added Reference https://vuldb.com/?submit.622199
Share the Post:

Related Posts