We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-44024



Description

Cross-Site Scripting (XSS) vulnerability was discovered in the Pichome system v2.1.0 and before. The vulnerability exists due to insufficient sanitization of user input in the login form. An attacker can inject malicious JavaScript code into the username or password fields during the login process

Reserved 2025-04-22 | Published 2025-05-14 | Updated 2025-05-15 | Assigner mitre

References

github.com/zyx0814/Pichome/issues/50

cve.org (CVE-2025-44024)

nvd.nist.gov (CVE-2025-44024)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-44024

Support options

Helpdesk Chat, Email, Knowledgebase