CVE-2025-3962

CVSS 3.1 Score 4.1 of 10 (medium)

Details

Published Apr 27, 2025
Updated: May 12, 2025
CWE ID 94
CWE ID 79

Summary

CVE-2025-3962 is a newly disclosed cross-site scripting vulnerability affecting the Comment Handler component in withstars Books-Management-System version 1.0. The flaw resides in the /api/comment/add file and can be triggered by manipulating the argument content. This issue permits attackers to inject malicious scripts, which can be executed in the context of the affected system, enabling remote code injection. Although the vulnerability is public, it only impacts products no longer supported by the maintainer.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share