Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-10368

Good to know:

icon
icon

Date: September 13, 2025

A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality of the file /htdocs/manageFilesFolders.php. Performing manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity Score

Related Resources (7)

https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss3.md#poc
https://nvd.nist.gov/vuln/detail/CVE-2025-10368
https://vuldb.com/?id.323776
https://vuldb.com/?submit.643519
https://vuldb.com/?ctiid.323776
https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss3.md
https://www.mend.io/vulnerability-database/CVE-2025-10368

Severity Score

Weakness Type (CWE)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79

Improper Control of Generation of Code ('Code Injection')

CWE-94

Top Fix

icon

Upgrade Version

Upgrade to version https://github.com/MiczFlor/RPi-Jukebox-RFID.git - null

CVSS v3

Base Score:
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): PARTIAL

Do you need more information?

Contact Us