CVE-2018-25331

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

6.1 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N                                    

Vulnerability Description

Zenar Content Management System contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating form parameters in POST requests. Attackers can inject script tags through the current_page parameter sent to the ajax.php endpoint, which reflects unsanitized user input in the response HTML to execute arbitrary JavaScript in victim browsers.

Vulnerability Details

Published Date

May 17, 2026

Last Modified

May 18, 2026

CWE ID

CWE-79

Source

NVD

Vendor

zenar

Product

Zenar Content Management System

External References

http://demo.zenar.io
https://www.exploit-db.com/exploits/44664
https://www.vulncheck.com/advisories/zenar-content-management-system-cross-site-scripting-via-ajax-php
https://zenar.io/

CVE-2018-25331

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment