{"id":"CVE-2025-8551","summary":"atjiu pybbs list cross site scripting","details":"A vulnerability was found in atjiu pybbs up to 6.0.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/comment/list. The manipulation of the argument Username leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a patch to fix this issue.","modified":"2026-08-12T15:15:07.200666Z","published":"2025-08-05T07:32:05.984Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8551.json","cna_assigner":"VulDB","cwe_ids":["CWE-79","CWE-94"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8551.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8551"},{"type":"ADVISORY","url":"https://vuldb.com/?id.318680"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.622195"},{"type":"REPORT","url":"https://github.com/atjiu/pybbs/issues/204"},{"type":"REPORT","url":"https://github.com/atjiu/pybbs/issues/204#issue-3256412774"},{"type":"REPORT","url":"https://github.com/atjiu/pybbs/issues/204#issuecomment-3134774122"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.318680"},{"type":"FIX","url":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/atjiu/pybbs","events":[{"introduced":"2a3e67f463b0582611a1241ecb172bd28cefc516"},{"fixed":"2fe4a51afbce0068c291bc1818bbc8f7f3b01a22"}],"database_specific":{"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["6.0","v6.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8551.json","vanir_signatures_modified":"2026-08-12T15:15:07Z","vanir_signatures":[{"id":"CVE-2025-8551-085c7555","signature_type":"Line","signature_version":"v1","source":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22","target":{"file":"src/main/java/co/yiiu/pybbs/controller/api/TopicApiController.java"},"deprecated":false,"digest":{"line_hashes":["154515023191952805527644514962031232057","321772059736531356415222279805480118870","172973264671170614226514506957631309973","282196970589789320543264581569541213029","184817336078675804217088777645890793326","257752354572212207157368595203983667118","28162324821521462986622117583544964184","116541499609015607586711617204417440642","21607132647509620328625163912345681902","245217046536196265519028674852234505206","311863007350041230256275292703680537386","225582793651850731572273798966618439912","328095272460947663135026253909590195894"],"threshold":0.9}},{"target":{"file":"src/main/java/co/yiiu/pybbs/service/impl/TopicService.java"},"deprecated":false,"digest":{"line_hashes":["163086160569840106189498629922255428787","335520857597872101282590041029685319423","200041728258169796348617878246012077083","340268249772306678661702884498796475803","167794275093476039164343731107728269614","212439685361556398299925485376142989886","321246391961120513058303182523458248872","42740343461446530740216998236196624006","77336419164744385804103617540169688620","113185728859408963399010045409561547509","218024211985399896225120871355985789025","337098527738226495043926617988965104508","104175801317812961607061975476693352902","157245577958898714205600809464595500470","117053070060782531814300170629027964203","337098527738226495043926617988965104508","284423354215036720393223329075978452003"],"threshold":0.9},"id":"CVE-2025-8551-2195939a","signature_type":"Line","signature_version":"v1","source":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22"},{"deprecated":false,"digest":{"function_hash":"33757605131593692891682484738389612867","length":498},"id":"CVE-2025-8551-3e98909d","signature_type":"Function","signature_version":"v1","source":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22","target":{"file":"src/main/java/co/yiiu/pybbs/service/impl/TopicService.java","function":"update"}},{"source":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22","target":{"file":"src/main/java/co/yiiu/pybbs/controller/api/TopicApiController.java","function":"edit"},"deprecated":false,"digest":{"function_hash":"54866396996849192557801018288785269645","length":721},"id":"CVE-2025-8551-5b838cfd","signature_type":"Function","signature_version":"v1"},{"target":{"file":"src/main/java/co/yiiu/pybbs/service/impl/TopicService.java","function":"insert"},"deprecated":false,"digest":{"function_hash":"201225344371347179517679841018058665276","length":1044},"id":"CVE-2025-8551-81131bab","signature_type":"Function","signature_version":"v1","source":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22"},{"id":"CVE-2025-8551-83fe192c","signature_type":"Line","signature_version":"v1","source":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22","target":{"file":"src/main/java/co/yiiu/pybbs/config/WebMvcConfig.java"},"deprecated":false,"digest":{"line_hashes":["211915273478505027619365225248069392383","300123578666287814198039331663370554158","204062456961529089821200715078343013180","255271259488069035248687080232674833367","86467021402370453411673731480069832556","300290895455099468114152210746319724037"],"threshold":0.9}},{"target":{"file":"src/main/java/co/yiiu/pybbs/controller/front/IndexController.java"},"deprecated":false,"digest":{"line_hashes":["34289077484815429234410437331674137403","308701945943245334810327979783651838296","332766317282924199261978838055568665564","796311716009406497067065152305257964","326058694272447232937314183709878341225","325859569939448727932909151605128828512","87625554708906938471871436777190299585","31793503983562041172223751294403457475","9195617551029167329421920726918604032"],"threshold":0.9},"id":"CVE-2025-8551-ac5d0290","signature_type":"Line","signature_version":"v1","source":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22"},{"deprecated":false,"digest":{"line_hashes":["62698769324753302385596140076391917951","2559585070317455597470679587481317635","76813255969637073205029377566685279949","338234444931927059918728754025181933635","297095741573940173065022843861672266697","125219472835134418942642578628798039800","224321821286733079753013577363777398172","196336666332582744453966203387962957612","62341967402990930692339688186174274067"],"threshold":0.9},"id":"CVE-2025-8551-d5e0adb0","signature_type":"Line","signature_version":"v1","source":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22","target":{"file":"src/main/java/co/yiiu/pybbs/controller/admin/TopicAdminController.java"}},{"deprecated":false,"digest":{"function_hash":"230917333793041158978282581371646075709","length":390},"id":"CVE-2025-8551-eb7747f8","signature_type":"Function","signature_version":"v1","source":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22","target":{"file":"src/main/java/co/yiiu/pybbs/controller/admin/TopicAdminController.java","function":"update"}},{"source":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22","target":{"function":"search","file":"src/main/java/co/yiiu/pybbs/controller/front/IndexController.java"},"deprecated":false,"digest":{"function_hash":"264195909325454872761525859038790002554","length":340},"id":"CVE-2025-8551-f425af89","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2025-8551-fa0b77ee","signature_type":"Function","signature_version":"v1","source":"https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22","target":{"file":"src/main/java/co/yiiu/pybbs/controller/api/TopicApiController.java","function":"create"},"deprecated":false,"digest":{"function_hash":"44366403874493174511268013695921861179","length":652}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}]}