CVE-2025-2123

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var of the file /contrib/cssgen.php of the component CSS Handler. The manipulation of the argument default-styles/keywords-1/keywords-2/keywords-3/keywords-4/comments leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79CWE-94

Affected software

VendorProductVersions
n/aGeSHi1.0.9.0; 1.0.9.1

References

Timeline

Published
Mar 9, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-212307.5Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2025-212317.5IP Helper Denial of Service VulnerabilityCVE-2025-212326.6Windows Digital Media Elevation of Privilege VulnerabilityCVE-2025-212338.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-212347.8Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityCVE-2025-212357.8Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityCVE-2025-212368.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-212378.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-212388.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-212398.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-21243.5A vulnerability, which was classified as problematic, was found in Control iD RH iD 25.2.25.0. This affects an unknown part of the file /v2/CVE-2025-212408.8Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-2123: Medium severity, CVSS 6.1 | Vulnix