CVE-2025-9591

LowCVSS 2.4/10Last modified Sep 26, 2026

Description

A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 2.4/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-79CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Aug 28, 2025
Last modified
Sep 26, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-95929.8A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /reportCVE-2025-95939.8A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unit_status_info.CVE-2025-95949.8A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /repCVE-2025-95956.1A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the filCVE-2025-95969.8A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /login.php. This mCVE-2025-95979.8A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /o_dashboard/reCVE-2025-95989.8A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/yeCVE-2025-95999.8A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality oCVE-2025-96009.8A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionaCVE-2025-96019.8A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employee_salCVE-2025-96026.5A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulatiCVE-2025-96039.8A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4. The affected element is an unknown function of the file /cgi-bin/internet.cg
CVE-2025-9591: Low severity, CVSS 2.4 | Vulnix