PT-2025-33746

CVE-2025-50938

Published

2025-08-19

Updated

2025-10-07

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Hustoj version 2025-01-31

Description: The software contains a cross site scripting (XSS) issue in the thread.php file through the TID parameter.

Recommendations: As a mitigation, sanitize the TID parameter in the thread.php file.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾