CVE-2025-54476

4.8 mediumEPSS 0.3%

Medium (4.8). EPSS 0.3% chance of exploitation in the next 30 days.

Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class.

Severity

4.8 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19