CVE-2025-8116

5.1 mediumEPSS 0.2%

Medium (5.1) in widzialni pad cms. EPSS 0.2% chance of exploitation in the next 30 days.

PAD CMS is vulnerable to Reflected XSS in printing and save to PDF functionality. Malicious attacker can craft special URL, which will result in arbitrary JavaScript execution in victim's browser, when opened. This issue affects all 3 templates: www, bip and www+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

widzialni:pad_cms

References

https://cert.pl/posts/2025/09/CVE-2025-7063

Check your stack JSON