Zavy86 WikiDocs template.inc.php cross site scripting_CVE-2025-7887

5.3 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Basic Information

ID CVE-2025-7887

Source VulDB

Published Jul 20, 2025 at 11:44

Modified Jul 21, 2025 at 13:19

Affected Product

Vendor Zavy86

Product WikiDocs

Version 1.0.0

Affected Versions Zavy86 WikiDocs 1.0.0
Zavy86 WikiDocs 1.0.1
Zavy86 WikiDocs 1.0.2
Zavy86 WikiDocs 1.0.3
Zavy86 WikiDocs 1.0.4
Zavy86 WikiDocs 1.0.5
Zavy86 WikiDocs 1.0.6
Zavy86 WikiDocs 1.0.7
Zavy86 WikiDocs 1.0.8
Zavy86 WikiDocs 1.0.9
Zavy86 WikiDocs 1.0.10
Zavy86 WikiDocs 1.0.11
Zavy86 WikiDocs 1.0.12
Zavy86 WikiDocs 1.0.13
Zavy86 WikiDocs 1.0.14
Zavy86 WikiDocs 1.0.15
Zavy86 WikiDocs 1.0.16
Zavy86 WikiDocs 1.0.17
Zavy86 WikiDocs 1.0.18
Zavy86 WikiDocs 1.0.19
Zavy86 WikiDocs 1.0.20
Zavy86 WikiDocs 1.0.21
Zavy86 WikiDocs 1.0.22
Zavy86 WikiDocs 1.0.23
Zavy86 WikiDocs 1.0.24
Zavy86 WikiDocs 1.0.25
Zavy86 WikiDocs 1.0.26
Zavy86 WikiDocs 1.0.27
Zavy86 WikiDocs 1.0.28
Zavy86 WikiDocs 1.0.29
Zavy86 WikiDocs 1.0.30
Zavy86 WikiDocs 1.0.31
Zavy86 WikiDocs 1.0.32
Zavy86 WikiDocs 1.0.33
Zavy86 WikiDocs 1.0.34
Zavy86 WikiDocs 1.0.35
Zavy86 WikiDocs 1.0.36
Zavy86 WikiDocs 1.0.37
Zavy86 WikiDocs 1.0.38
Zavy86 WikiDocs 1.0.39
Zavy86 WikiDocs 1.0.40
Zavy86 WikiDocs 1.0.41
Zavy86 WikiDocs 1.0.42
Zavy86 WikiDocs 1.0.43
Zavy86 WikiDocs 1.0.44
Zavy86 WikiDocs 1.0.45
Zavy86 WikiDocs 1.0.46
Zavy86 WikiDocs 1.0.47
Zavy86 WikiDocs 1.0.48
Zavy86 WikiDocs 1.0.49
Zavy86 WikiDocs 1.0.50
Zavy86 WikiDocs 1.0.51
Zavy86 WikiDocs 1.0.52
Zavy86 WikiDocs 1.0.53
Zavy86 WikiDocs 1.0.54
Zavy86 WikiDocs 1.0.55
Zavy86 WikiDocs 1.0.56
Zavy86 WikiDocs 1.0.57
Zavy86 WikiDocs 1.0.58
Zavy86 WikiDocs 1.0.59
Zavy86 WikiDocs 1.0.60
Zavy86 WikiDocs 1.0.61
Zavy86 WikiDocs 1.0.62
Zavy86 WikiDocs 1.0.63
Zavy86 WikiDocs 1.0.64
Zavy86 WikiDocs 1.0.65
Zavy86 WikiDocs 1.0.66
Zavy86 WikiDocs 1.0.67
Zavy86 WikiDocs 1.0.68
Zavy86 WikiDocs 1.0.69
Zavy86 WikiDocs 1.0.70
Zavy86 WikiDocs 1.0.71
Zavy86 WikiDocs 1.0.72
Zavy86 WikiDocs 1.0.73
Zavy86 WikiDocs 1.0.74
Zavy86 WikiDocs 1.0.75
Zavy86 WikiDocs 1.0.76
Zavy86 WikiDocs 1.0.77
Zavy86 WikiDocs 1.0.78

CWE Classification

CWE-79 CWE-94

References

{
    "lastseen": "",
    "description": "A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
    "published": "2025-07-20T11:44:05.636Z",
    "modified": "2025-07-21T13:19:35.520Z",
    "type": "cve",
    "title": "Zavy86 WikiDocs template.inc.php cross site scripting",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.317002\nhttps://vuldb.com/?ctiid.317002\nhttps://vuldb.com/?submit.609063\nhttps://github.com/Zavy86/WikiDocs/issues/256\nhttps://github.com/Zavy86/WikiDocs/issues/256#issuecomment-3034714777\nhttps://github.com/Zavy86/WikiDocs/issues/256#issue-3201516458",
    "id": "CVE-2025-7887",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79",
        "CWE-94"
    ],
    "cvelist": null,
    "sourceData": "Zavy86 WikiDocs 1.0.0\nZavy86 WikiDocs 1.0.1\nZavy86 WikiDocs 1.0.2\nZavy86 WikiDocs 1.0.3\nZavy86 WikiDocs 1.0.4\nZavy86 WikiDocs 1.0.5\nZavy86 WikiDocs 1.0.6\nZavy86 WikiDocs 1.0.7\nZavy86 WikiDocs 1.0.8\nZavy86 WikiDocs 1.0.9\nZavy86 WikiDocs 1.0.10\nZavy86 WikiDocs 1.0.11\nZavy86 WikiDocs 1.0.12\nZavy86 WikiDocs 1.0.13\nZavy86 WikiDocs 1.0.14\nZavy86 WikiDocs 1.0.15\nZavy86 WikiDocs 1.0.16\nZavy86 WikiDocs 1.0.17\nZavy86 WikiDocs 1.0.18\nZavy86 WikiDocs 1.0.19\nZavy86 WikiDocs 1.0.20\nZavy86 WikiDocs 1.0.21\nZavy86 WikiDocs 1.0.22\nZavy86 WikiDocs 1.0.23\nZavy86 WikiDocs 1.0.24\nZavy86 WikiDocs 1.0.25\nZavy86 WikiDocs 1.0.26\nZavy86 WikiDocs 1.0.27\nZavy86 WikiDocs 1.0.28\nZavy86 WikiDocs 1.0.29\nZavy86 WikiDocs 1.0.30\nZavy86 WikiDocs 1.0.31\nZavy86 WikiDocs 1.0.32\nZavy86 WikiDocs 1.0.33\nZavy86 WikiDocs 1.0.34\nZavy86 WikiDocs 1.0.35\nZavy86 WikiDocs 1.0.36\nZavy86 WikiDocs 1.0.37\nZavy86 WikiDocs 1.0.38\nZavy86 WikiDocs 1.0.39\nZavy86 WikiDocs 1.0.40\nZavy86 WikiDocs 1.0.41\nZavy86 WikiDocs 1.0.42\nZavy86 WikiDocs 1.0.43\nZavy86 WikiDocs 1.0.44\nZavy86 WikiDocs 1.0.45\nZavy86 WikiDocs 1.0.46\nZavy86 WikiDocs 1.0.47\nZavy86 WikiDocs 1.0.48\nZavy86 WikiDocs 1.0.49\nZavy86 WikiDocs 1.0.50\nZavy86 WikiDocs 1.0.51\nZavy86 WikiDocs 1.0.52\nZavy86 WikiDocs 1.0.53\nZavy86 WikiDocs 1.0.54\nZavy86 WikiDocs 1.0.55\nZavy86 WikiDocs 1.0.56\nZavy86 WikiDocs 1.0.57\nZavy86 WikiDocs 1.0.58\nZavy86 WikiDocs 1.0.59\nZavy86 WikiDocs 1.0.60\nZavy86 WikiDocs 1.0.61\nZavy86 WikiDocs 1.0.62\nZavy86 WikiDocs 1.0.63\nZavy86 WikiDocs 1.0.64\nZavy86 WikiDocs 1.0.65\nZavy86 WikiDocs 1.0.66\nZavy86 WikiDocs 1.0.67\nZavy86 WikiDocs 1.0.68\nZavy86 WikiDocs 1.0.69\nZavy86 WikiDocs 1.0.70\nZavy86 WikiDocs 1.0.71\nZavy86 WikiDocs 1.0.72\nZavy86 WikiDocs 1.0.73\nZavy86 WikiDocs 1.0.74\nZavy86 WikiDocs 1.0.75\nZavy86 WikiDocs 1.0.76\nZavy86 WikiDocs 1.0.77\nZavy86 WikiDocs 1.0.78",
    "sourceHref": "",
    "cvss": {
        "score": 5.3,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "WikiDocs",
    "version": "1.0.0",
    "vendor": "Zavy86",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}