CVE-2025-47204
MEDIUM
Published 2025-05-13T00:00:00.000Z
Actions:
CVSS Score
V3.1
6.1
/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score Metrics
Exploitability: N/A
Impact: N/A
Attack Vector Metrics
Impact Metrics
Description
An issue was discovered in post.php in bootstrap-multiselect (aka Bootstrap Multiselect) 1.1.2. A PHP script in the source code echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting (XSS) vulnerability exploitable through Cross-Site Request Forgery (CSRF).
Available Exploits
Bootstrap Multiselect <= 1.1.2 - Cross-Site Scripting
A PHP script in the source code release echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting (XSS) vulnerability exploitable through Cross-Site Request Forgery (CSRF).
ID: CVE-2025-47204
Author: r3naissance
Medium
References:
Related News
No news articles found for this CVE.
References
Published: 2025-05-13T00:00:00.000Z
Last Modified: 2025-05-14T13:41:07.847Z
Copied to clipboard!