Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Javaalpha

#54983of 56,326
4Total CVSS
Vulnerabilities · 1
PT-2025-54174
4.0
2025-12-30
Sunhailin12315 · Product-Review 商品评价系统 · CVE-2025-15248
**Name of the Vulnerable Software and Affected Versions** sunhailin12315 product-review 商品评价系统 versions up to 91ead6890b4065bb45b7602d0d73348e75cb4639 **Description** A security flaw exists in the sunhailin12315 product-review 商品评价系统. The issue is related to cross site scripting, which can be triggered by manipulating the `content` argument within the Write a Review component. This allows for remote execution of malicious scripts. The exploit has been publicly released. The project maintainers were notified of the issue but have not yet responded. **Recommendations** Versions up to 91ead6890b4065bb45b7602d0d73348e75cb4639 should be updated when a fix becomes available. As a temporary workaround, consider sanitizing the `content` input to prevent script injection.