CVE-2025-9416
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-25

Last updated on: 2026-04-29

Assigner: VulDB

Description
A security flaw has been discovered in oitcode samarium up to 0.9.6. This vulnerability affects unknown code of the file /cms/webpage/ of the component Pages Image Handler. The manipulation results in cross site scripting. The attack may be performed from a remote location. The exploit has been released to the public and may be exploited.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-25
Last Modified
2026-04-29
Generated
2026-06-16
AI Q&A
2025-08-26
EPSS Evaluated
2026-06-14
NVD
CVE-2025-9416
EUVD
EUVD-2025-25744
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
oitcode samarium 0.9.6
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a security flaw in the oitcode samarium software up to version 0.9.6, specifically in the Pages Image Handler component within the /cms/webpage/ file. It allows an attacker to perform cross-site scripting (XSS) attacks remotely by manipulating the affected code.

Impact Analysis

The vulnerability can allow an attacker to execute cross-site scripting attacks remotely, which may lead to unauthorized actions performed in the context of a user's browser, potentially compromising user data or session information.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-9416. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart