VULNERABILITY INTELLIGENCE
CVE-2025-4379
EPSS probability0.50%
CISA KEVNot currently listed
Published2025-05-23
Last modified2026-06-17
Description
DobryCMS in versions 2.* and lower is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in szukaj parameter allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened. A hotfix for affected versions was released on 29.04.2025. It removes the vulnerability without incrementing the version.
Weakness classification
- cvd@cert.pl: CWE-79