CVE-2025-3251

Name of the Vulnerable Software and Affected Versions xujiangfei admintwo version 1.0

Description A problematic issue was found in xujiangfei admintwo, affecting an unknown part of the file /user/updateSet. The manipulation of the motto argument leads to cross-site scripting. It is possible to initiate the attack remotely.

Recommendations For xujiangfei admintwo version 1.0, as a temporary workaround, consider restricting access to the /user/updateSet endpoint or avoiding the use of the motto argument until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.