CVE-2025-48958 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Froxlor is open source server administration software. Prior to version 2.2.6, an HTML Injection vulnerability in the customer account portal allows an attacker…
Medium CVSS: 5.5

CVE-2025-48958

Froxlor is open source server administration software. Prior to version 2.2.6, an HTML Injection vulnerability in the customer account portal allows an attacker to inject malicious HTML payloads in the email section. This can lead to phishing attacks, credential theft, and reputational damage by redirecting users to malicious external websites. The vulnerability has a medium severity, as it can be exploited through user input without authentication. Version 2.2.6 fixes the issue.
Vendor
Froxlor
Product
Froxlor
CWE
CWE-79
Yayın Tarihi
2025-06-02 12:15:25
Güncelleme
2025-06-25 17:36:43
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Froxlor MEDIUM Froxlor 2025

Referanslar

https://github.com/froxlor/Froxlor/commit/fde43f80600f1035e1e3d2297411b666d805549a https://github.com/froxlor/Froxlor/security/advisories/GHSA-26xq-m8xw-6373 https://github.com/user-attachments/assets/86947633-3e7c-4e10-86cc-92e577761e8e https://github.com/froxlor/Froxlor/security/advisories/GHSA-26xq-m8xw-6373