PT-2025-5914 · Unknown · Venugopal Show Notice/Message On Admin Area

·

CVE-2025-25075

·

Published

2025-02-07

·

Updated

2025-02-12

CVSS v3.1

7.1

High

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Venugopal Show notice or message on admin area versions n/a through 2.0
Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Stored XSS in the Venugopal Show notice or message on admin area. This vulnerability enables an attacker to perform unauthorized actions on the admin area.
Recommendations For versions n/a through 2.0, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-25075

Affected Products

Venugopal Show Notice/Message On Admin Area