CVE-2025-9755— Khanakag-17 Library Management System index.php cross site scripting
Quick assessment
Affected
Khanakag-17 Library Management System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Library Management System是King Albaracin个人开发者的一个带有二维码考勤和自动生成借书证的图书馆管理系统。 Library Management System存在安全漏洞，该漏洞源于对文件/index.php中参数msg的错误操作导致跨站脚本。
Possible ATT&CK Techniques 1 AI
T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-9755
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Khanakag-17 Library Management System index.php cross site scripting
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24. This affects an unknown function of the file /index.php. The manipulation of the argument msg leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
Library Management System 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Library Management System是King Albaracin个人开发者的一个带有二维码考勤和自动生成借书证的图书馆管理系统。 Library Management System存在安全漏洞，该漏洞源于对文件/index.php中参数msg的错误操作导致跨站脚本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Khanakag-17 | Library Management System | 60ed174506094dcd166e34904a54288e5d10ff24 | - |
|
II. Public POCs for CVE-2025-9755
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-9755
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Library Management System
-
CVE-2026-78200
itsourcecode Library Management System editbooks.php sql inj -
CVE-2026-18666
Library Management System < 3.6.7 - Subscriber+ SQL Injectio -
CVE-2026-12582
Library Management System < 3.5.8 - Unauthenticated SQL Inje -
CVE-2026-56034
WordPress Library Management System plugin <= 3.5.7 - SQL In -
CVE-2025-12707
Library Management System <= 3.2.1 - Unauthenticated SQL Inj
Same weakness: CWE-79
-
CVE-2026-92727
EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cr -
CVE-2026-92826
EWWW Image Optimizer <= 8.7.7 - Reflected Cross-Site Scripti -
CVE-2026-92538
LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripti -
CVE-2026-92977
Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.3.5 -
CVE-2026-92551
Paid Membership Plugin, Ecommerce, User Registration Form, L
V. Comments for CVE-2025-9755
No comments yet