ExploitPublished
Piranha CMS 12.0 · Stored XSS in Text Block
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 10 Apr 2026, 00:24 UTC
What to do
AI-suggested
Until an official fix is available, users should consider applying input validation or output encoding workarounds if possible, or restrict access to content editing features to trusted users only.
Description
Piranha CMS 12.0 - Stored XSS in Text Block
Indicators of compromise
Exploit source code
# Exploit Title: Piranha CMS 12.0 - Stored Cross Site Scripting
# Date: 2025-09-26
# Exploit Author: Chidubem Chukwu (Terminal Venom)
# LinkedIn : https://www.linkedin.com/in/chidubem-chukwu-20bb202a9?
# Vendor Homepage: https://piranhacms.org
# Software Link: https://github.com/PiranhaCMS/piranha.core/releases/tag/v12.0
# Version: 12.0
# Category: Web Application
# Tested on: Ubuntu 22.04, Piranha CMS v12.0 (local), Chrome
# CVE: CVE-2025-57692
# Privilege Level: authenticated user
# Patched …References
Community reviews
Loading reviews…