VulnSocial

CVE-2025-57692Disclosure(dotnetfoundation / piranha_cms)

LOWCVSS 6.8 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.

dotnetfoundation CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • piranha_cms

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
dotnetfoundation
Products
piranha_cms

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-04: 1Technical Details · 2026-02-04: 102-04
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Red Secure Tech Ltd.@redsecuretech
    Disclosure

    Stored XSS in Piranha CMS 12.0 Text blocks allows authenticated users to inject JS that steals cookies & executes on all visitors. https://redsecuretech.co.uk/blog/post/piranha-cms-12-0-stored-xss-cve-2025-57692/873 #Cybersecurity #CVE #PiranhaCMS #StoredXSS #WebSecurity #CMSVulnerability #XSSExploit #InfoSec #SecureCoding #ThreatIntel https://t.co/4jukDil4lc

    Post summary

    A stored XSS vulnerability (CVE-2025-57692) in Piranha CMS 12.0 enables authenticated users to inject malicious JavaScript that can steal cookies and impact all visitors. No exploits, patches, or active exploitation reports are mentioned.

    0101048
    41 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appdotnetfoundationpiranha_cms12.0--

Explore more

Back to dashboarddotnetfoundation CVEspiranha_cms vulnerabilities