==========================
== Gharib Personal Blog ==
==========================
A Techi Personal Blog

CVE-2025-2583 - SMF Cross-Site Scripting Vulnerability

CVE-2025-2583 - SMF Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-2583 Published : March 21, 2025, 7:15 a.m. | 6 hours, 43 minutes ago Description : A vulnerability was found in SimpleMachines SMF 2.1.4. It has been classified as problematic. This affects an unknown part of the file ManageNews.php. The manipulation of the argument subject/message leads to cross site scripting.

CVE ID : CVE-2025-2583
Published : March 21, 2025, 7:15 a.m. | 6 hours, 43 minutes ago
Description : A vulnerability was found in SimpleMachines SMF 2.1.4. It has been classified as problematic. This affects an unknown part of the file ManageNews.php. The manipulation of the argument subject/message leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
Severity: 3.5 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source