What’s Vulnerable › Vulnerabilities

CVE-2021-25925

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-04-12 · updated 2026-06-17
• Weakness: CWE-79

Description

in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive information.

Affected products

• sickrage: from 4.2.0 through 10.0.11; 10.0.11, 10.0.11-dev1

References

• https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4
• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25925
• https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4
• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25925

Get alerted when CVE-2021-25925 or the next vulnerability affects your stack