CVE-2025-65465Disclosure

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A reflected Cross-Site Scripting (XSS) vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary web script or HTML via a crafted payload in a filename parameter (e.g., to the FileRead function). This occurs because the error message is not properly sanitized before being output to the user. This vulnerability is fixed in version 2.18.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-65465

Full discourse1 post

Vulmon Vulnerability Feed@VulmonFeeds223d
Disclosure
CVE-2025-65465 Reflected XSS in Skrol29 TbsZip 2.17 via Unsanitized FileRead Error Message https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-65465
Post summary
A reflected XSS vulnerability (CVE-2025-65465) was disclosed in Skrol29 TbsZip 2.17, triggered by an unsanitized FileRead error message.
0000080
4.0K followersView on X

Explore more

Back to dashboard