CVE-2025-3252
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Apr 4, 2025
Updated: Apr 23, 2025
CWE ID 79
Summary
CVE-2025-3252 is a newly identified vulnerability affecting the xujiangfei admintwo 1.0 software. This issue, classified as problematic, resides within the unknown code of the /resource/add file. Manipulation of the Name argument can lead to cross-site scripting (XSS), allowing remote attackers to inject malicious scripts into users' browsers. The exploit for this vulnerability has been disclosed to the public, increasing the risk of successful attacks. Users are strongly advised to apply the available patch or update to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.