A cross-site scripting (XSS) vulnerability in miniTCG v1.3.1 beta allows attackers to execute abritrary web scripts or HTML via injecting a crafted payload into the id parameter at /members/edit.php.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://ambiguous.aniyu.net/ | Product |
| https://github.com/J4cky1028/vulnerability-research/tree/main/CVE-2025-45661 | Third Party Advisory |
| https://github.com/nekocari/miniTCG | Product |
Configurations
History
02 Jul 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/nekocari/miniTCG - Product | |
| References | () https://github.com/J4cky1028/vulnerability-research/tree/main/CVE-2025-45661 - Third Party Advisory | |
| References | () http://ambiguous.aniyu.net/ - Product | |
| CPE | cpe:2.3:a:heavenspell:minitcg:1.3.1:beta:*:*:*:*:*:* | |
| First Time |
Heavenspell minitcg
Heavenspell |
18 Jun 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-18 14:15
Updated : 2025-07-02 19:15
NVD link : CVE-2025-45661
Mitre link : CVE-2025-45661
JSON object : View
Products Affected
heavenspell
- minitcg
CWE
No CWE.