CVE-2025-2616

4.8 mediumEPSS 0.3%

Medium (4.8). EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability classified as problematic has been found in yangyouwang 杨有旺 crud 简约后台管理系统 1.0.0. Affected is an unknown function of the component Role Management Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

4.8 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

2.4 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2025-03-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://gitee.com/yangyouwang/crud/issues/IBSPOX
https://vuldb.com/?ctiid.300618
https://vuldb.com/?id.300618
https://vuldb.com/?submit.518962

Check your stack JSON