What’s Vulnerable › Vulnerabilities

CVE-2025-51662

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-11-19 · updated 2026-06-17
• Weakness: CWE-79

Description

A stored cross-site scripting (XSS) vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers of any users who try to access the infected codebox by clicking link or entering share code.

Affected products

• Lanol Filecodebox: through 2.2

References

• https://github.com/vastsa/FileCodeBox
• https://github.com/vastsa/FileCodeBox/issues/351
• https://github.com/vastsa/FileCodeBox/issues/351

Get alerted when CVE-2025-51662 or the next vulnerability affects your stack