CVE-2025-9929

1.9 lowEPSS 0.3%

Low (1.9) in fabian responsive blog site. EPSS 0.3% chance of exploitation in the next 30 days.

A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogs_view.php. Executing manipulation of the argument product_code/gen_name/product_name/supplier can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

Severity

CVSS 4.0

1.9 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2025-09-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fabian:responsive_blog_site

References

https://code-projects.org/
https://github.com/chen2496088236/CVE/issues/5
https://vuldb.com/?ctiid.322331
https://vuldb.com/?id.322331
https://vuldb.com/?submit.642586

Check your stack JSON