CVE-2025-3795
DaiCuo SEO Optimization Settings Section cross site scripting
MEDIUM 4.8EPSS 0.4%
A vulnerability was found in DaiCuo 1.3.13. It has been rated as problematic. Affected by this issue is some unknown functionality of the component SEO Optimization Settings Section. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
- Affected
- DaiCuo
- CVSS v4.0 VULDB
- 4.8 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS v3.1 NVD
- 3.4 LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N - CVSS v3.1 VULDB
- 2.4 LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N - CVSS v2.0 VULDB
- 3.3 LOW
AV:N/AC:L/Au:M/C:N/I:P/A:N - EPSS
- 0.38% chance of exploitation in the next 30 days, 30th percentile
- Published
- 2025-04-18
Proof-of-concept exploits (1)
- daicuo/cms/issues/10★ · 2022-04-12