CVE-2025-2133

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in ftcms 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/index.php/news/edit. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79 CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Mar 10, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-213307.5Windows Remote Desktop Services Denial of Service Vulnerability CVE-2025-213317.3Windows Installer Elevation of Privilege Vulnerability CVE-2025-213328.8MapUrlToZone Security Feature Bypass Vulnerability CVE-2025-213337.8Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability CVE-2025-213347.8Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability CVE-2025-213357.8Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability CVE-2025-213365.6Windows Cryptographic Information Disclosure Vulnerability CVE-2025-213373.3Windows NTFS Elevation of Privilege Vulnerability CVE-2025-213387.8GDI+ Remote Code Execution Vulnerability CVE-2025-213398.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21343.5IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due CVE-2025-213405.5Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability