Unrated
dayrui XunRuiCMS Friendly Links cross site scripting
A vulnerability was found in dayrui XunRuiCMS up to 4.6.3. It has been rated as problematic. This issue affects some unknown processing of the component Friendly Links Handler. The manipulation of the argument Website Address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Announced Source revision 1
Original source ↗CVE-2025-2131
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:CVE-2025-2131
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"repo": "https://github.com/dayrui/xunruicms",
"type": "GIT",
"events": [
{
"introduced": "547234d52c276cbcf1c7d63f75b5c2b9b231b7d4"
},
{
"last_affected": "547234d52c276cbcf1c7d63f75b5c2b9b231b7d4"
}
],
"database_specific": {
"source": "AFFECTED_FIELD",
"extracted_events": [
{
"introduced": "4.6.3"
},
{
"last_affected": "4.6.3"
}
]
}
}
],
"versions": [
"4.6.3"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2131.json"
}
}
]- Related CVEs
- CVE-2025-2131
Source reference:
/id
Publisher severity
No explicit severity was provided.
- Event
- #14882 · Revision 1
- Added to Heist Feed
- Publisher date