Riskcovery

CVE-2025-7618

A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM

State
Published
Severity
4.8 Medium
Published
Jul 14, 2025
Updated
Jul 14, 2025
Reserved
Jul 14, 2025

Read the record on cve.org

Description

A stored Cross-Site Scripting (XSS) vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser and used with the affected applications. Affected products and versions include: from ADM 4.1.0 to ADM 4.3.3.RH61 as well as ADM 5.0.0.RIN1 and earlier, and Text Editor 1.0.0.r112 and earlier.

Scores

CVSSScoreVectorSource
4.04.8 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:NASUSTOR1

Weaknesses

  • CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Affected Products

ProductVersions
ADMASUSTOR
  • 4.1.0 through 4.3.3.RH61Affected
  • 5.0.0 through 5.0.0.RIN1Affected
ADMASUSTOR
  • 1.0.0 through 1.0.0.r112Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.