CVE-2025-57692

Publication date

2025-09-26 00:00:00

Family

mitre

State

PUBLISHED

Description

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.