CVE-2025-13058
CVE-2025-13058 · soerennb eXtplorer Filename cross site scripting
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of the component Filename Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The patch is identified as 002def70b985f7012586df2c44368845bf405ab3. Applying a patch is advised to resolve this issue.
CVSS 5.1 · Medium · EPSS 0.3%
- Published
- Updated
Stack: system
Affected products and versions
extplorer
- Versions
- 2.1.0: Affected
- 2.1.1: Affected
- 2.1.2: Affected
- 2.1.3: Affected
- 2.1.4: Affected
- 2.1.5: Affected
- 2.1.6: Affected
- 2.1.7: Affected
- 2.1.8: Affected
- 2.1.9: Affected
- 2.1.10: Affected
- 2.1.11: Affected
- 2.1.12: Affected
- 2.1.13: Affected
- 2.1.14: Affected
- 2.1.15: Affected
No fix published
extplorer Ubuntu:16.04:LTS
- Versions
- 2.1.0b6+dfsg.3-4+deb7u1
- 2.1.0b6+dfsg.3-4+deb7u1ubuntu1
- 2.1.0b6+dfsg.3-4+deb7u3ubuntu0.1
- 2.1.0b6+dfsg.3-4+deb7u4ubuntu0.16.04.1
- 2.1.0b6+dfsg.3-4+deb7u5ubuntu0.16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://vuldb.com/?id.332185
- https://vuldb.com/?ctiid.332185
- https://vuldb.com/?submit.682370
- https://github.com/soerennb/extplorer/issues/33
- https://github.com/soerennb/extplorer/commit/002def70b985f7012586df2c44368845bf405ab3
- https://github.com/soerennb/extplorer/
- https://nvd.nist.gov/vuln/detail/CVE-2025-13058