CVE-2025-2131

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in dayrui XunRuiCMS up to 4.6.3. It has been rated as problematic. This issue affects some unknown processing of the component Friendly Links Handler. The manipulation of the argument Website Address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Mar 9, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-213106.6Windows Digital Media Elevation of Privilege VulnerabilityCVE-2025-213119.8Windows NTLM V1 Elevation of Privilege VulnerabilityCVE-2025-213122.4Windows Smart Card Reader Information Disclosure VulnerabilityCVE-2025-213136.5Windows Security Account Manager (SAM) Denial of Service VulnerabilityCVE-2025-213146.5Windows SmartScreen Spoofing VulnerabilityCVE-2025-213157.8Microsoft Brokering File System Elevation of Privilege VulnerabilityCVE-2025-213165.5Windows Kernel Memory Information Disclosure VulnerabilityCVE-2025-213175.5Windows Kernel Memory Information Disclosure VulnerabilityCVE-2025-213185.5Windows Kernel Memory Information Disclosure VulnerabilityCVE-2025-213195.5Windows Kernel Memory Information Disclosure VulnerabilityCVE-2025-21327.2A vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown function of the file /admin/index.php/web/ajax_alCVE-2025-213205.5Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-2131: Medium severity, CVSS 4.8 | Vulnix