CVE-2026-25616 PoC — Blesta 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25616.yaml

Associated Vulnerability

Title:Blesta 跨站脚本漏洞 (CVE-2026-25616)
Description:Blesta是Blesta公司的一个客户关系管理系统。 Blesta 5.13.3之前版本存在跨站脚本漏洞，该漏洞源于输入验证处理不当。

Description

Blesta 3.x through 5.x before 5.13.3 contains an input validation vulnerability caused by mishandling input, letting attackers potentially exploit the system, exploit requires unspecified conditions.

File Snapshot


 id: CVE-2026-25616

info:
  name: Blesta <= 5.13.1 - Cross-Site Scripting
  author: 0x_Akoko
  sever

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.