{"id":"CVE-2025-7887","summary":"Zavy86 WikiDocs template.inc.php cross site scripting","details":"A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","modified":"2026-08-12T03:51:38.037518286Z","published":"2025-07-20T11:44:05.636Z","database_specific":{"cwe_ids":["CWE-79","CWE-94"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7887.json","cna_assigner":"VulDB"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7887.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-7887"},{"type":"ADVISORY","url":"https://vuldb.com/?id.317002"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.609063"},{"type":"REPORT","url":"https://github.com/Zavy86/WikiDocs/issues/256"},{"type":"REPORT","url":"https://github.com/Zavy86/WikiDocs/issues/256#issue-3201516458"},{"type":"REPORT","url":"https://github.com/Zavy86/WikiDocs/issues/256#issuecomment-3034714777"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.317002"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/zavy86/wikidocs","events":[{"introduced":"6ab779a65da5cd8f26a77544c27f3656e9ae0ef7"},{"last_affected":"13a856cbfc381c35a7875de7e5fb5ca905b003b4"}],"database_specific":{"source":["AFFECTED_FIELD","CPE_RANGE"],"cpe":"cpe:2.3:a:wikidocs:wikidocs:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.0"},{"last_affected":"1.0.0"},{"introduced":"1.0.1"},{"last_affected":"1.0.1"},{"introduced":"1.0.2"},{"last_affected":"1.0.2"},{"introduced":"1.0.3"},{"last_affected":"1.0.3"},{"introduced":"1.0.4"},{"last_affected":"1.0.4"},{"introduced":"1.0.5"},{"last_affected":"1.0.5"},{"introduced":"1.0.6"},{"last_affected":"1.0.6"},{"introduced":"1.0.7"},{"last_affected":"1.0.7"},{"introduced":"1.0.8"},{"last_affected":"1.0.8"},{"introduced":"1.0.9"},{"last_affected":"1.0.9"},{"introduced":"1.0.10"},{"last_affected":"1.0.10"},{"introduced":"1.0.11"},{"last_affected":"1.0.11"},{"introduced":"1.0.12"},{"last_affected":"1.0.12"},{"introduced":"1.0.13"},{"last_affected":"1.0.13"},{"introduced":"1.0.14"},{"last_affected":"1.0.14"},{"introduced":"1.0.15"},{"last_affected":"1.0.15"},{"introduced":"1.0.16"},{"last_affected":"1.0.16"},{"introduced":"1.0.17"},{"last_affected":"1.0.17"},{"introduced":"1.0.18"},{"last_affected":"1.0.18"},{"introduced":"1.0.19"},{"last_affected":"1.0.19"},{"introduced":"1.0.20"},{"last_affected":"1.0.20"},{"introduced":"1.0.21"},{"last_affected":"1.0.21"},{"introduced":"1.0.22"},{"last_affected":"1.0.22"},{"introduced":"1.0.23"},{"last_affected":"1.0.23"},{"introduced":"1.0.24"},{"last_affected":"1.0.24"},{"introduced":"1.0.25"},{"last_affected":"1.0.25"},{"introduced":"1.0.26"},{"last_affected":"1.0.26"},{"introduced":"1.0.27"},{"last_affected":"1.0.27"},{"introduced":"1.0.28"},{"last_affected":"1.0.28"},{"introduced":"1.0.29"},{"last_affected":"1.0.29"},{"introduced":"1.0.30"},{"last_affected":"1.0.30"},{"introduced":"1.0.31"},{"last_affected":"1.0.31"},{"introduced":"1.0.32"},{"last_affected":"1.0.32"},{"introduced":"1.0.33"},{"last_affected":"1.0.33"},{"introduced":"1.0.34"},{"last_affected":"1.0.34"},{"introduced":"1.0.35"},{"last_affected":"1.0.35"},{"introduced":"1.0.36"},{"last_affected":"1.0.36"},{"introduced":"1.0.37"},{"last_affected":"1.0.37"},{"introduced":"1.0.38"},{"last_affected":"1.0.38"},{"introduced":"1.0.39"},{"last_affected":"1.0.39"},{"introduced":"1.0.40"},{"last_affected":"1.0.40"},{"introduced":"1.0.41"},{"last_affected":"1.0.41"},{"introduced":"1.0.42"},{"last_affected":"1.0.42"},{"introduced":"1.0.43"},{"last_affected":"1.0.43"},{"introduced":"1.0.44"},{"last_affected":"1.0.44"},{"introduced":"1.0.45"},{"last_affected":"1.0.45"},{"introduced":"1.0.46"},{"last_affected":"1.0.46"},{"introduced":"1.0.47"},{"last_affected":"1.0.47"},{"introduced":"1.0.48"},{"last_affected":"1.0.48"},{"introduced":"1.0.49"},{"last_affected":"1.0.49"},{"introduced":"1.0.50"},{"last_affected":"1.0.50"},{"introduced":"1.0.51"},{"last_affected":"1.0.51"},{"introduced":"1.0.52"},{"last_affected":"1.0.52"},{"introduced":"1.0.53"},{"last_affected":"1.0.53"},{"introduced":"1.0.54"},{"last_affected":"1.0.54"},{"introduced":"1.0.55"},{"last_affected":"1.0.55"},{"introduced":"1.0.56"},{"last_affected":"1.0.56"},{"introduced":"1.0.57"},{"last_affected":"1.0.57"},{"introduced":"1.0.58"},{"last_affected":"1.0.58"},{"introduced":"1.0.59"},{"last_affected":"1.0.59"},{"introduced":"1.0.60"},{"last_affected":"1.0.60"},{"introduced":"1.0.61"},{"last_affected":"1.0.61"},{"introduced":"1.0.62"},{"last_affected":"1.0.62"},{"introduced":"1.0.63"},{"last_affected":"1.0.63"},{"introduced":"1.0.64"},{"last_affected":"1.0.64"},{"introduced":"1.0.65"},{"last_affected":"1.0.65"},{"introduced":"1.0.66"},{"last_affected":"1.0.66"},{"introduced":"1.0.67"},{"last_affected":"1.0.67"},{"introduced":"1.0.68"},{"last_affected":"1.0.68"},{"introduced":"1.0.69"},{"last_affected":"1.0.69"},{"introduced":"1.0.70"},{"last_affected":"1.0.70"},{"introduced":"1.0.71"},{"last_affected":"1.0.71"},{"introduced":"1.0.72"},{"last_affected":"1.0.72"},{"introduced":"1.0.73"},{"last_affected":"1.0.73"},{"introduced":"1.0.74"},{"last_affected":"1.0.74"},{"introduced":"1.0.75"},{"last_affected":"1.0.75"},{"introduced":"1.0.76"},{"last_affected":"1.0.76"},{"introduced":"1.0.77"},{"last_affected":"1.0.77"},{"introduced":"1.0.78"},{"last_affected":"1.0.78"},{"introduced":"0"}]}}],"versions":["1.0.0","1.0.1","1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.15","1.0.16","1.0.17","1.0.18","1.0.19","1.0.2","1.0.20","1.0.21","1.0.22","1.0.23","1.0.24","1.0.25","1.0.26","1.0.27","1.0.28","1.0.29","1.0.3","1.0.30","1.0.31","1.0.32","1.0.33","1.0.34","1.0.35","1.0.36","1.0.37","1.0.38","1.0.39","1.0.4","1.0.40","1.0.41","1.0.42","1.0.43","1.0.44","1.0.45","1.0.46","1.0.47","1.0.48","1.0.49","1.0.5","1.0.50","1.0.51","1.0.52","1.0.53","1.0.54","1.0.55","1.0.56","1.0.57","1.0.58","1.0.59","1.0.6","1.0.60","1.0.61","1.0.62","1.0.63","1.0.64","1.0.65","1.0.66","1.0.67","1.0.68","1.0.69","1.0.7","1.0.70","1.0.71","1.0.72","1.0.73","1.0.74","1.0.75","1.0.76","1.0.77","1.0.78","1.0.8","1.0.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7887.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}]}