CVE-2025-65233

MEDIUM 6.1CVE-2025-65233 · Published 17/12/2025 · updated 13/10/2026

In short

CVE-2025-65233 is a MEDIUM (CVSS 6.1) vulnerability affecting slims (slims project).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 13.1% of all vulnerabilities.
Fix: update to 9.6.0 or later.

Package	Affected versions	Patched versions
slims slims_project	`< 9.6.0`	`9.6.0`

Description

Reflected cross-site scripting (XSS) in SLiMS (slims9_bulian) before 9.6.0 via improper handling of $_SERVER['PHP_SELF' ] in index.php/sysconfig.inc.php, which allows remote attackers to execute arbitrary JavaScript in a victim's browser by supplying a crafted URL path.

References

hbtw25/vulnerability-research · Exploit
slims/slims9_bulian · Issue Tracking

More vulnerabilities in slims

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free