Vulnerability Description
A vulnerability has been found in Fanli2012 native-php-cms 1.0 and classified as problematic. This vulnerability affects unknown code of the file /fladmin/jump.php. The manipulation of the argument message/error leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Native-Php-Cms Project | Native-Php-Cms | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/Fanli2012/native-php-cms/issues/5ExploitIssue TrackingVendor Advisory
- https://github.com/Fanli2012/native-php-cms/issues/5#issue-2769894596ExploitIssue TrackingVendor Advisory
- https://vuldb.com/?ctiid.291928Permissions RequiredVDB Entry
- https://vuldb.com/?id.291928Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.475240Third Party AdvisoryVDB Entry
- https://github.com/Fanli2012/native-php-cms/issues/5ExploitIssue TrackingVendor Advisory
- https://github.com/Fanli2012/native-php-cms/issues/5#issue-2769894596ExploitIssue TrackingVendor Advisory
FAQ
What is CVE-2025-0483?
CVE-2025-0483 is a vulnerability with a CVSS score of 3.5 (LOW). A vulnerability has been found in Fanli2012 native-php-cms 1.0 and classified as problematic. This vulnerability affects unknown code of the file /fladmin/jump.php. The manipulation of the argument me...
How severe is CVE-2025-0483?
CVE-2025-0483 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-0483?
Check the references section above for vendor advisories and patch information. Affected products include: Native-Php-Cms Project Native-Php-Cms.