CVE-2025-54117

Published August 18th, 2025

View on NVD ↗

CVSS v3

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerability in NamelessMC before 2.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the dashboard text editor component. This vulnerability is fixed in 2.2.4.

NamelessMC/Nameless

NamelessMC is a free, easy to use & powerful website software for your Minecraft server, which includes a large range of features.

GitHub

651