Threats tagged 'ghsa-qg8g-7gxc-vcrf'

CVE-2025-13182 is a cross-site scripting (XSS) vulnerability in pojoin h3blog version 1.0. It occurs in an unknown function within the /admin/cms/category/addtitle file, where manipulation of the Title argument allows remote attackers to inject malicious scripts. The vulnerability has a low CVSS score of 3.5 and requires low privileges with user interaction to exploit. Public exploit code is available, but there are no known exploits in the wild. No patch or remediation information is currently provided.