A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://gitee.com/Hk_Cms/HkCms/issues/IBZ2G7 | Vendor Advisory Issue Tracking |
| https://gitee.com/Hk_Cms/HkCms/issues/IBZ2G7 | Vendor Advisory Issue Tracking |
| https://vuldb.com/?ctiid.309729 | Permissions Required VDB Entry |
| https://vuldb.com/?id.309729 | Third Party Advisory VDB Entry |
Configurations
History
17 Jun 2025, 14:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?id.309729 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.309729 - Permissions Required, VDB Entry | |
| References | () https://gitee.com/Hk_Cms/HkCms/issues/IBZ2G7 - Vendor Advisory, Issue Tracking | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.7 |
| First Time |
Hkcms hkcms
Hkcms |
|
| CWE | CWE-79 | |
| CPE | cpe:2.3:a:hkcms:hkcms:2.3.2.240702:*:*:*:*:*:*:* |
21 May 2025, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
21 May 2025, 06:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-21 06:16
Updated : 2025-06-17 14:10
NVD link : CVE-2025-5013
Mitre link : CVE-2025-5013
JSON object : View
Products Affected
hkcms
- hkcms
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')