CVE-2025-9591

1.9 lowEPSS 0.3%

Low (1.9). EPSS 0.3% chance of exploitation in the next 30 days.

A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

CVSS 4.0

1.9 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

2.4 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2025-08-28
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

References

https://github.com/SaaS5SaaS/CVE/issues/3
https://vuldb.com/?ctiid.321765
https://vuldb.com/?id.321765
https://vuldb.com/?submit.636176

Check your stack JSON