cdevroe unmark Marks.php cross site scripting_CVE-2025-10331

5.1 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability has been found in cdevroe unmark up to 1.9.3. This issue affects some unknown processing of the file /application/controllers/Marks.php. Such manipulation of the argument Title leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Basic Information

ID CVE-2025-10331

Source VulDB

Published Sep 13, 2025 at 01:02

Affected Product

Vendor cdevroe

Product unmark

Version 1.9.0

Affected Versions cdevroe unmark 1.9.0
cdevroe unmark 1.9.1
cdevroe unmark 1.9.2
cdevroe unmark 1.9.3

CWE Classification

CWE-79 CWE-94

References

{
    "lastseen": "",
    "description": "A vulnerability has been found in cdevroe unmark up to 1.9.3. This issue affects some unknown processing of the file /application/controllers/Marks.php. Such manipulation of the argument Title leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
    "published": "2025-09-13T01:02:06.508Z",
    "modified": "2025-09-13T01:02:06.508Z",
    "type": "cve",
    "title": "cdevroe unmark Marks.php cross site scripting",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.323757\nhttps://vuldb.com/?ctiid.323757\nhttps://vuldb.com/?submit.643533\nhttps://github.com/YZS17/CVE/blob/main/unmark/xss2.md",
    "id": "CVE-2025-10331",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79",
        "CWE-94"
    ],
    "cvelist": null,
    "sourceData": "cdevroe unmark 1.9.0\ncdevroe unmark 1.9.1\ncdevroe unmark 1.9.2\ncdevroe unmark 1.9.3",
    "sourceHref": "",
    "cvss": {
        "score": 5.1,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "unmark",
    "version": "1.9.0",
    "vendor": "cdevroe",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}