CVE-2025-3965: itwanger paicoding post cross site scripting

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-04-27 · updated 2026-06-17
Weakness: CWE-79

Description

A vulnerability has been found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /article/app/post. The manipulation of the argument content leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

itwanger paicoding: 1.0.3

References

https://github.com/uglory-gll/javasec/blob/main/paicoding.md
https://github.com/uglory-gll/javasec/blob/main/paicoding.md#1stored-cross-site-scripting
https://vuldb.com/?ctiid.306301
https://vuldb.com/?id.306301
https://vuldb.com/?submit.557249
https://github.com/uglory-gll/javasec/blob/main/paicoding.md
https://github.com/uglory-gll/javasec/blob/main/paicoding.md#1stored-cross-site-scripting

Get alerted when CVE-2025-3965 or the next vulnerability affects your stack