CVE-2025-7748

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in ZCMS 3.6.0. This vulnerability affects unknown code of the component Create Article Page. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-79 CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Jul 17, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-77499.8A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects CVE-2025-77509.8A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown CVE-2025-77519.8A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerabi CVE-2025-77529.8A vulnerability was found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this issue is some CVE-2025-77539.8A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been classified as critical. This affects an unknow CVE-2025-77547.5A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. This vulnerability affect CVE-2025-77558.8A vulnerability was found in code-projects Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown proces CVE-2025-77564.3A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0. Affected is an unknown function. The manipula CVE-2025-77579.8A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is an unknown function CVE-2025-77588.8A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015. Affected by this issue is the CVE-2025-77598.8A vulnerability was identified in thinkgem JeeSite up to 5.12.0. This vulnerability affects unknown code of the file modules/core/src/main/j CVE-2025-77607.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ofisimo Web-Based Software Tech