CVE-2025-0485

Summary

CVE-2025-0485 is a newly identified vulnerability that affects the Fanli2012 native-php-cms version 1.0. This issue has been classified as problematic and involves an unknown function in the /fladmin/sysconfig_doedit.php file. By manipulating the argument info, an attacker can execute cross-site scripting (XSS) attacks. The vulnerability permits remote exploitation, meaning that an attack can be launched from outside the affected system. The exploit for this vulnerability has been disclosed to the public, increasing the risk of widespread attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.