Threats tagged 'ghsa-22hp-rvc6-8h8g'

CVE-2025-13181 is a cross-site scripting (XSS) vulnerability in pojoin h3blog version 1.0. The flaw exists in an unknown function within the /admin/cms/material/add file, where manipulation of the 'Name' argument can lead to XSS. The vulnerability can be exploited remotely and public exploit code has been disclosed. The CVSS score is 3.5, indicating a low severity impact primarily on integrity. No patch or remediation information is currently available.