CVE-2025-2617

A vulnerability classified as problematic was found in yangyouwang 杨有旺 crud 简约后台管理系统 1.0.0. Affected by this vulnerability is an unknown functionality of the component Department Page. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS v4.0

4.8 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

2.4 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CVSS v2.0

3.3 LOWAV:N/AC:L/Au:M/C:N/I:P/A:N

EPSS

0.30% chance of exploitation in the next 30 days, 22th percentile

Published

2025-03-22

Updated

2025-03-24

Proof-of-concept exploits (1)

• https://gitee.com/yangyouwang/crud/issues/IBSPOX

References

• CVE Record
• NVD entry

Related

• CVE-2025-2616
• CVE-2025-2618
• CVE-2025-26159
• CVE-2025-2619
• CVE-2025-26153
• CVE-2025-26198