CVE-2025-65233

Published December 17th, 2025

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

Reflected cross-site scripting (XSS) in SLiMS (slims9_bulian) before 9.6.0 via improper handling of $_SERVER['PHP_SELF' ] in index.php/sysconfig.inc.php, which allows remote attackers to execute arbitrary JavaScript in a victim's browser by supplying a crafted URL path.

slims/slims9_bulian

SLiMS 9 Bulian official source code repository.

GitHub

223

hbtw25/vulnerability-research

This repository contains information on all of the CVEs I found.

GitHub