Threats Tagged 'cve-2025-8116'
View all threats tagged with 'cve-2025-8116'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-8116'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2025-8116 is a reflected Cross-site Scripting (XSS) vulnerability in the Polska Akademia Dostępności (PAD) CMS affecting its printing and save-to-PDF functionality across all three templates (www, bip, www+bip). An attacker can craft a malicious URL that, when visited by a user, executes arbitrary JavaScript in the victim's browser. The product is End-Of-Life, and no patches will be issued, leaving systems exposed. The vulnerability has a CVSS 4.0 base score of 5.1 (medium severity), requiring no privileges but some user interaction. While no known exploits are reported in the wild, the risk remains due to the lack of vendor support. European organizations using PAD CMS should be aware of the risk of session hijacking, data theft, or defacement through this XSS flaw. Mitigation requires compensating controls such as input validation, web application firewalls, or migration to supported platforms. Poland is the most affected country given the product origin and usage, with other European countries potentially impacted if they use PAD CMS. Join the discussion | CVE Database V5 | 09/30/2025, 10:04:25 UTC Added: 09/30/2025, 10:09:28 UTC |
Showing 1 to 1 of 1 result