CVE-2025-5378

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown part of the file mycouncil2.aspx. The manipulation of the argument atTxtStreet leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79 CWE-94

Affected software

Vendor	Product	Versions
Astun Technology	iShare Maps	5.4.0

References

https://vuldb.com/?ctiid.310671Permissions Required, VDB Entry
https://vuldb.com/?id.310671Third Party Advisory, VDB Entry
https://vuldb.com/?submit.582841Third Party Advisory, VDB Entry

Timeline

Published: May 31, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-537816.5Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information o CVE-2025-537827.8Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges loca CVE-2025-537837.5Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.CVE-2025-537848.4Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-537868.0On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Micro CVE-2025-537877.5Microsoft 365 Copilot BizChat Information Disclosure Vulnerability CVE-2025-537887.0Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally CVE-2025-537897.8Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally.CVE-2025-53794.3A vulnerability classified as critical was found in NuCom NC-WR744G 8.5.5 Build 20200530.307. This vulnerability affects unknown code of the CVE-2025-537914.7Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.CVE-2025-537929.1Azure Portal Elevation of Privilege Vulnerability CVE-2025-537937.5Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.