VULNERABILITY INTELLIGENCE

CVE-2025-15202

CVSS score2.4 LOW

EPSS probability0.25%

CISA KEVNot currently listed

Published2025-12-29

Last modified2026-10-07

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Description

A vulnerability has been found in SohuTV CacheCloud up to 3.2.0. This affects the function taskQueueList of the file src/main/java/com/sohu/cache/web/controller/TaskController.java. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Weakness classification

cna@vuldb.com: CWE-79

Primary references

cna@vuldb.com — Exploit, Issue Tracking, Vendor Advisory
cna@vuldb.com — Permissions Required, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking, Vendor Advisory