Piranha CMS vulnerable to stored cross-site scripting (XSS)

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-61413 · ADVISORY
• PiranhaCMS/piranha.core · PACKAGE
• Saconyfx/security-advisories · WEB
• piranhacms.org · WEB
• piranhacms.org · Product

Piranha 的其他漏洞

• CVE-2025-67291中危 6.1A stored cross-site scripting (XSS) vulnerability in the Media module of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts…
• CVE-2025-67290中危 6.1A stored cross-site scripting (XSS) vulnerability in the Page Settings module of Piranha CMS v12.1 allows attackers to execute arbitrary web…
• CVE-2025-57692中危 6.8PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of…
• CVE-2024-55341中危 4.7A stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web bro…
• CVE-2024-55342中危 4.7A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This P…