Home > Vulnerability Database > CVE-2025-64710

Mend.io Vulnerability Database

CVE-2025-64710

Good to know:

Date: November 12, 2025

Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting (XSS) vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compromise the security and integrity of web applications. Applications based on this Bitplatform Boilerplate might also be vulnerable. Version 9.11.3 fixes the issue.

Severity Score

0.0

Related Resources (3)

Url: https://nvd.nist.gov/vuln/detail/CVE-2025-64710

Url: https://github.com/bitfoundation/bitplatform/security/advisories/GHSA-rv95-xj37-7c3w

Url: https://www.mend.io/vulnerability-database/CVE-2025-64710

Weakness Type (CWE)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79

Top Fix

Upgrade Version

Upgrade to version Bit.Boilerplate - 9.11.3;https://github.com/bitfoundation/bitplatform.git - v-9.11.3

Learn More

CVSS v3.1

Base Score:	0.0
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	CHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	NONE