CVE-2025-45662

MEDIUM 6.1CVE-2025-45662 · Published 10/07/2025 · updated 17/06/2026

In short

CVE-2025-45662 is a MEDIUM (CVSS 6.1) vulnerability affecting mpgram web (nnproject).
Chance of exploitation in the next 30 days (EPSS): 0.27%, higher than 19.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mpgram web nnproject	`= 2025-04-09`	No fix yet

Description

A cross-site scripting (XSS) vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload.

References

J4cky1028/vulnerability-research · Third Party Advisory
shinovon/mpgram-web · Product
mp.nnchan.ru/login.php · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free