VULNERABILITY INTELLIGENCE

CVE-2025-7902

CVSS score5.4 MEDIUM

EPSS probability0.32%

CISA KEVNot currently listed

Published2025-07-20

Last modified2026-06-17

Description

A vulnerability classified as problematic has been found in yangzongzhuan RuoYi up to 4.8.1. Affected is the function addSave of the file com/ruoyi/web/controller/system/SysNoticeController.java. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.