CVE-2025-25461

A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server and rendered without proper sanitization or output encoding. This results in the XSS payload executing in the browser of any user who views the document.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/RoNiXxCybSeC0101/CVE-2025-25461	Exploit Third Party Advisory
https://www.seeddms.org/	Product
https://github.com/RoNiXxCybSeC0101/CVE-2025-25461	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:seeddms:seeddms:6.0.29:*:*:*:*:*:*:*

History

No history.

Information

Published : 2025-02-28 16:15

Updated : 2025-07-09 19:32

NVD link : CVE-2025-25461

Mitre link : CVE-2025-25461

CVE.ORG link : CVE-2025-25461

JSON object : View

Products Affected

seeddms

seeddms

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2025-25461", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2025-02-28T16:15:39.387", "references": [{"url": "https://github.com/RoNiXxCybSeC0101/CVE-2025-25461", "tags": ["Exploit", "Third Party Advisory"], "source": "[email protected]"}, {"url": "https://www.seeddms.org/", "tags": ["Product"], "source": "[email protected]"}, {"url": "https://github.com/RoNiXxCybSeC0101/CVE-2025-25461", "tags": ["Exploit", "Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the \"Add Category\" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server and rendered without proper sanitization or output encoding. This results in the XSS payload executing in the browser of any user who views the document."}, {"lang": "es", "value": "Existe una vulnerabilidad de cross-site scripting (XSS) almacenado en SeedDMS 6.0.29. Un usuario o administrador malintencionado con el permiso \"Agregar categor\u00eda\" puede inyectar un payload XSS malicioso en el campo de nombre de la categor\u00eda. Cuando un documento se asocia posteriormente con esta categor\u00eda, el payload se almacena en el servidor y se procesa sin la depuraci\u00f3n o codificaci\u00f3n de salida adecuadas. Esto hace que el payload XSS se ejecute en el navegador de cualquier usuario que vea el documento."}], "lastModified": "2025-07-09T19:32:02.980", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:seeddms:seeddms:6.0.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC35B387-DB5E-4716-91FE-1F3CC1184F78"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}