PT-2025-31150 · Copyparty · Copyparty
CVE-2025-54423
·
Published
2025-07-28
·
Updated
2026-07-07
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
copyparty versions up to and including 1.18.4
Description
copyparty is a portable file server susceptible to cross-site scripting (XSS). An unauthenticated attacker can execute arbitrary JavaScript code in a victim’s browser due to improper sanitization of multimedia tags in music files, including m3u files.
Recommendations
Update to version 1.18.5 or later.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Copyparty