CVE-2025-45316

Description

A cross-site scripting (XSS) vulnerability in the TextBlockModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter.

PUBLISHED Reserved 2025-04-22 | Published 2025-08-13 | Updated 2025-08-13 | Assigner mitre

References

github.com/...eeeb32a9b36978/app/modules/TextBlockModule.php

github.com/...eeeb32a9b36978/app/modules/TextBlockModule.php

github.com/...c118eeeb32a9b36978/app/models/ChatMsgModel.php

github.com/...8eb311235c118eeeb32a9b36978/app/views/chat.php

github.com/...ves/blob/main/CVE-2025-45316/CVE-2025-45316.md

cve.org (CVE-2025-45316)

nvd.nist.gov (CVE-2025-45316)

Download JSON