CVE-2025-8319

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 30, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-83208.8Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability. This vulnerability allows network-CVE-2025-83216.8Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on aCVE-2025-83228.8The e-School from Ventem has a Missing Authorization vulnerability, allowing remote attackers with regular privilege to access administratorCVE-2025-83238.8The e-School from Ventem has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shelCVE-2025-83249.8Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter confCVE-2025-83258.8The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the 'Internal/Everyone' role can inCVE-2025-83269.8A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the fileCVE-2025-83279.8A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown funCVE-2025-83289.8A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some CVE-2025-83299.8A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the fiCVE-2025-83309.8A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. This vulnerability affects unknown code oCVE-2025-83319.8A vulnerability was found in code-projects Online Farm System 1.0 and classified as critical. This issue affects some unknown processing of
CVE-2025-8319: Medium severity, CVSS 6.1 | Vulnix