Skip to main content
ExploitPublished

RPi-Jukebox-RFID 2.8.0 - Stored Cross-Site Scripting (XSS)

Source Exploit-DB RSS Feed

0
Severity
Medium

Rated by Threat Radar

Data as of 10 Apr 2026, 00:24 UTC

What to do

AI-suggested

Until an official fix is available, users should consider restricting access to the affected interface and applying web application security controls such as input validation and output encoding to mitigate stored XSS risks.

Description

RPi-Jukebox-RFID 2.8.0 - Stored Cross-Site Scripting (XSS)

Indicators of compromise

Exploit source code

Exploit code for RPi-Jukebox-RFID 2.8.0 - Stored Cross-Site Scripting (XSS)1,506 characters
# Exploit Title: RPi-Jukebox-RFID 2.8.0 - Stored XSS (CVE-2025-10370)
# Date: 2025-09-25
# Exploit Author: Beatriz Fresno Naumova
# Vendor Homepage: https://github.com/MiczFlor/RPi-Jukebox-RFID
# Software Link: https://github.com/MiczFlor/RPi-Jukebox-RFID/releases/tag/v2.8.0
# Version: 2.8.0
# Tested on: Raspberry Pi OS with RPi-Jukebox-RFID v2.8.0
# CVE: CVE-2025-10370
#
# Description:
# This PoC demonstrates a Cross-Site Scripting (XSS) vulnerability in the userScripts.php page.
# The vulnerab…

References

Community reviews

Loading reviews…