Vulnerability Database

318,756

Total vulnerabilities in the database

CVE-2025-57692

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.

Published: Sep 26, 2025
Updated: Jan 19, 2026
CVE: CVE-2025-57692
GHSA: GHSA-456v-f425-8mcv
Severity: Medium
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
Piranha	-	12.0.x
dotnetfoundation / piranha_cms	12.0	12.0.x

https://github.com/PiranhaCMS/piranha.core/releases/tag/v12.0
https://github.com/Saconyfx/security-advisories/blob/main/CVE-2025-57692/advisory.md

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo