CVE-2025-51962

MEDIUM 6.1CVE-2025-51962 · Published 15/12/2025 · updated 07/10/2026

In short

CVE-2025-51962 is a MEDIUM (CVSS 6.1) vulnerability affecting microstudio (microstudio).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 13.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
microstudio microstudio	`= 24.01.29`	No fix yet

Description

A HTML Injection vulnerability in the comment section of the project page in MicroStudio 24.01.29 allows remote attackers to inject arbitrary web script or HTML via the text parameter of add_project_comment function.

References

Sunnyshineshow/vulnerability-research · Third Party Advisory
pmgl/microstudio · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free