CVE-2025-69169

MediumCVSS 5.4/10Last modified Oct 7, 2026

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noor Alam Easy Media Download easy-media-download allows Reflection Injection.This issue affects Easy Media Download: from n/a through <= 1.1.11.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Weakness enumeration

CWE-80

Affected software

No affected versions have been published.

Timeline

Published
Jan 8, 2026
Last modified
Oct 7, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-69179.8A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability affects unknown codeCVE-2025-691708.1Unauthenticated Local File Inclusion in Eventicity <= 1.5 versions.CVE-2025-691718.1Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.CVE-2025-691728.1Unauthenticated Local File Inclusion in Resurs <= 1.3 versions.CVE-2025-691738.1Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions.CVE-2025-691748.1Unauthenticated Local File Inclusion in Etude <= 1.6 versions.CVE-2025-691758.1Unauthenticated Local File Inclusion in Line Agency <= 1.3.1 versions.CVE-2025-691768.1Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.CVE-2025-691778.1Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions.CVE-2025-691788.1Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions.CVE-2025-691799.8Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.CVE-2025-69189.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncvav Virtual PBX Software allows SQL
CVE-2025-69169: Medium severity, CVSS 5.4 | Vulnix