CVE-2025-52161

Scholl Communications AG Weblication CMS Core v019.004.000.000 was discovered to contain a cross-site scripting (XSS) vulnerability

Critical · published September 8, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
32.3
In the wild
Unconfirmed
What it is

🚨 A sneaky XSS vulnerability lurks in Scholl Communications AG Weblication CMS Core 019.004.000.000, ready to turn your website into a playground for attackers! 🔥 Think of this vulnerability like a restaurant where the kitchen staff accepts meal orders from anyone, even strangers, without checking the identity of the customer. This means a mischievous diner could order anything, causing chaos for everyone enjoying their meal. With an XSS vulnerability like this, attackers could inject malicious scripts into your website, allowing them to steal sensitive user data, impersonate users, or even deface your site. The consequences could be absolutely devastating, leading to lost trust and financial damage!

Put simply

Think of this vulnerability like a restaurant where the kitchen staff accepts meal orders from anyone, even strangers, without checking the identity of the customer. This means a mischievous diner could order anything, causing chaos for everyone enjoying their meal. This vulnerability allows attackers to execute arbitrary JavaScript code in the context of your website by manipulating user inputs. When exploited, it can inject harmful scripts that run in every user's browser.

What to do

With an XSS vulnerability like this, attackers could inject malicious scripts into your website, allowing them to steal sensitive user data, impersonate users, or even deface your site. The consequences could be absolutely devastating, leading to lost trust and financial damage! To secure your application, immediately upgrade Weblication CMS Core to the latest version that resolves this issue. Implement input validation and output encoding to thwart any potential script injection. Regularly audit your application for vulnerabilities to reinforce security. You've got this! By patching and following best practices, you'll have your site secured in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00393 · 32.3th percentile
Published
2025-09-08T00:00Z
EPSS history
Timeline
  • 08 SEP 00:00Z
    Scholl Communications AG Weblication CMS Core v019.004.000.000 was discovered to contain a cross-site scripting (XSS) vulnerability
    cvelistv5