PiranhaCMS stored XSS

中危 6.8CVE-2025-57692 · GHSA-456v-f425-8mcv · Published 26/09/2025 · updated 17/06/2026

要点

CVE-2025-57692 是影响 Piranha, piranha cms (dotnetfoundation) 的中危 (CVSS 6.8)漏洞。
未来 30 天内被利用的概率（EPSS）：0.33%，高于 25.9% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
Piranha NuGet	`≤ 12.0`	No fix yet
piranha cms dotnetfoundation	`= 12.0`	No fix yet

Description

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.

NVD description

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.

References

nvd.nist.gov/vuln/detail/CVE-2025-57692 · ADVISORY
PiranhaCMS/piranha.core · PACKAGE
PiranhaCMS/piranha.core release v12.0 · WEB
Saconyfx/security-advisories · WEB

Piranha 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

Piranha

NuGet

≤ 12.0

No fix yet

piranha cms

dotnetfoundation

= 12.0

No fix yet

Description

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.

NVD description

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.

Piranha 的其他漏洞

查看全部 →