CVE-2025-50754
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Unisite CMS是俄罗斯Unisite公司的一个内容管理系统。 Unisite CMS 5.0版本存在安全漏洞，该漏洞源于报告功能存在存储型跨站脚本，可能导致管理员会话劫持和远程代码执行。
Possible ATT&CK Techniques 3 AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by Compromise T1505 · Server Software Component
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-50754
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality. A malicious script submitted by an attacker is rendered in the admin panel when viewed by an administrator. This allows attackers to hijack the admin session and, by leveraging the template editor, upload and execute a PHP web shell on the server, leading to full remote code execution.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Unisite CMS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Unisite CMS是俄罗斯Unisite公司的一个内容管理系统。 Unisite CMS 5.0版本存在安全漏洞，该漏洞源于报告功能存在存储型跨站脚本，可能导致管理员会话劫持和远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2025-50754
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Stored XSS in a CMS platform leads to remote code execution (CVE-2025-50754) | https://github.com/furk4nyildiz/CVE-2025-50754-PoC | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-50754
请登录查看更多情报信息。
Proof of Concept for CVE-2025-50754 (1)
Same Patch Batch · n/a · 2025-08-04 · 18 CVEs total
| CVE-2025-53394 | 7.7 HIGH | Paramount Macrium Reflect 安全漏洞 |
| CVE-2025-53395 | 7.7 HIGH | Paramount Macrium Reflect 安全漏洞 |
| CVE-2025-8534 | 2.5 LOW | libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference |
| CVE-2025-51534 | Austrian Archaeological Institute OpenAtlas 安全漏洞 | |
| CVE-2024-45183 | SAMSUNG Exynos 安全漏洞 | |
| CVE-2025-52239 | ZKEACMS 安全漏洞 | |
| CVE-2025-46206 | artifex mupdf 安全漏洞 | |
| CVE-2025-51726 | CyberGhostVPN 安全漏洞 | |
| CVE-2025-51535 | Austrian Archaeological Institute OpenAtlas 安全漏洞 | |
| CVE-2025-51536 | Austrian Archaeological Institute OpenAtlas 安全漏洞 | |
| CVE-2025-51390 | TOTOLINK N600R 安全漏洞 | |
| CVE-2025-51387 | GitKraken Desktop 安全漏洞 | |
| CVE-2025-50341 | Axelor 安全漏洞 | |
| CVE-2025-50340 | SOGo Webmail 安全漏洞 | |
| CVE-2025-50420 | Freedesktop Poppler 安全漏洞 | |
| CVE-2025-44643 | Draytek多款产品 安全漏洞 | |
| CVE-2025-26065 | Intelbras RX1500 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2025-50754
No comments yet