CVE-2025-3386
CVSS 2.0 Score 3.3 of 10 (low)
Details
Published Apr 7, 2025
Updated: Apr 8, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2025-3386 is a newly discovered vulnerability affecting LinZhaoguan pb-cms version 2.0. This issue is considered problematic and allows for cross-site scripting attacks. The vulnerability is located within the Friendship Link Handler component, specifically the /admin#links file. A remote attacker can manipulate this functionality to inject malicious code, potentially leading to serious security consequences. The exploit for this vulnerability has been disclosed publicly, increasing the risk of widespread exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.