CVE-2025-61413

Published October 23rd, 2025

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks.

PiranhaCMS/piranha.core

Piranha CMS is the friendly editor-focused CMS for .NET that can be used both as an integrated CMS or as a headless API.

GitHub

2.18K

Saconyfx/security-advisories

Public security advisories published by Me (Chidubem Chukwu), including CVE disclosures and vulnerability reports for open-source and third-party projects.

GitHub