PT-2025-16590
CVE-2025-3688
·
Published
2025-04-16
·
Updated
2025-04-16
Description by
CVSS 2.0
3.3
LowMetricsAV:N/AC:L/Au:M/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
mirweiye Seven Bears Library CMS version 2023
Description
A problematic issue was found in the Background Management Page component, leading to cross-site scripting. The manipulation can be initiated remotely.
Recommendations
For mirweiye Seven Bears Library CMS version 2023, consider restricting access to the Background Management Page until a fix is available. As a temporary workaround, avoid using the Background Management Page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾