CVE-2025-1553

pankajindevops scale project cross site scripting

State: Published
Severity: 5.1 Medium
Published: Feb 22, 2025
Updated: Feb 24, 2025
Reserved: Feb 21, 2025

Description

A vulnerability was found in pankajindevops scale up to 3633544a00245d3df88b6d13d9b3dd0f411be7f6. It has been classified as problematic. Affected is an unknown function of the file /scale/project. The manipulation of the argument goal leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

Scores

CVSS	Score	Vector	Source
4.0	5.1 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N	VulDB
3.1	3.5 Low	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N	VulDB
3.0	3.5 Low	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N	VulDB
2.0	4.0 Medium	AV:N/AC:L/Au:S/C:N/I:P/A:N	VulDB

Weaknesses

CWE-79 Cross Site Scripting
CWE-94 Code Injection

Affected Products

Product	Versions
scalepankajindevops	3633544a00245d3df88b6d13d9b3dd0f411be7f6Affected

References

VDB-296502 | pankajindevops scale project cross site scriptingvdb-entrytechnical-description
VDB-296502 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
Submit #491216 | https://github.com/pankajindevops/scale Scale latest Stored Cross Site Scriptingthird-party-advisory
https://docs.google.com/document/d/1r8Ad7Kaw0bwKZMVFDlhzhpjdque7vRGTDKDeP7yiUEcrelated
https://drive.google.com/file/d/1CRdzTf2bPEB7MshIighYYcVL3IbArBPr/viewexploit
https://docs.google.com/document/d/1r8Ad7Kaw0bwKZMVFDlhzhpjdque7vRGTDKDeP7yiUEc/edit?tab=t.0#heading=h.ukpd7mmeqiqpexploit

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.