PT-2025-40307

CVE-2025-61583

Published

2025-10-01

Updated

2026-10-12

Description by

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TS3 Manager versions prior to 2.2.2

Description TS3 Manager, a web interface for Teamspeak3 servers, contains a reflected cross-site scripting issue. The problem resides in the login page's error handling, specifically when processing server hostnames. Malicious scripts within these hostnames can be executed in a user's browser due to insufficient sanitization.

Recommendations Update to version 2.2.2 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CWE-20: Improper Input Validation

Related identifiers