PoC Index85,100 CVEs with PoCs

CVE-2025-3962

withstars Books-Management-System Comment add cross site scripting

MEDIUM 5.1EPSS 0.4%

A vulnerability classified as problematic was found in withstars Books-Management-System 1.0. This vulnerability affects unknown code of the file /api/comment/add of the component Comment Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Affected
withstars · Books-Management-System
CVSS v4.0 VULDB
5.1 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 NVD
4.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
CVSS v3.1 VULDB
3.5 LOWCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v2.0 VULDB
4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
EPSS
0.41% chance of exploitation in the next 30 days, 34th percentile
Published
2025-04-27
Updated
2025-04-28

Proof-of-concept exploits (1)

Security advisories

References