CVE-2025-1114

Summary

CVE-2025-1114 is a newly discovered cross-site scripting (XSS) vulnerability affecting the function save in newbee-mall 1.0's /admin/categories/save component. The issue arises when the argument categoryName is manipulated, leading to the injection of malicious code that can be executed remotely. This vulnerability has been disclosed to the public, increasing the risk of exploitation. Newbee-mall uses a rolling release model, making it difficult to determine specific versions with the vulnerability or those with the fix. Therefore, users are encouraged to apply extra security measures and closely monitor updates from the developer.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.