AATF/aatf.us

AATF/aatf.us

GitHubGitHub
GitHubgithub.com
www.aatf.uswww.aatf.us
Releases0
Stars2
Asian Arts Talents Foundation (AATF) Website
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-55473↗
6.1 MEDIUM—

Asian Arts Talents Foundation (AATF) Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting (XSS). The vulnerability exists in the /ip.php endpoint, which processes and displays the X-Forwarded-For HTTP header without proper sanitization or output encoding. This allows an attacker to inject malicious JavaScript code that will execute in visitor browsers.