CVE-2025-3960
CVSS 3.1 Score 9.6 of 10 (high)
Details
Published Apr 27, 2025
Updated: May 12, 2025
CWE ID 352
Summary
CVE-2025-3960 is a critical vulnerability affecting the withstars Books-Management-System 1.0. The issue lies in an unknown functionality of the file /allreaders.html within the Background Interface. Manipulation of this function results in missing authorization, enabling remote attacks. The exploit for this vulnerability has been made public, increasing the risk for potential exploitation. Importantly, this vulnerability only impacts products that are no longer supported by the maintainer.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.