VULNERABILITY INTELLIGENCE
CVE-2025-7887
CVSS score4.3 MEDIUM
EPSS probability0.67%
CISA KEVNot currently listed
Published2025-07-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Description
A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Weakness classification
- cna@vuldb.com: CWE-79
- nvd@nist.gov: CWE-79
Primary references
- cna@vuldb.com — Exploit, Issue Tracking, Third Party Advisory
- cna@vuldb.com — Exploit, Issue Tracking, Third Party Advisory
- cna@vuldb.com — Exploit, Issue Tracking
- cna@vuldb.com — Permissions Required, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Exploit, Third Party Advisory, VDB Entry
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking, Third Party Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking, Third Party Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking