BaseFortify

Publication date: 2025-11-12

Last updated on: 2026-02-24

Assigner: VulDB

Description

A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of the component Filename Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The patch is identified as 002def70b985f7012586df2c44368845bf405ab3. Applying a patch is advised to resolve this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-12

Last Modified

2026-02-24

Generated

2026-07-06

AI Q&A

2025-11-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-13058

Affected Vendors & Products

Vendor	Product	Version / Range
extplorer	extplorer	to 2.1.15 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

This vulnerability is a security flaw in soerennb eXtplorer up to version 2.1.15, specifically in an unknown function of the Filename Handler component. It allows an attacker to perform cross-site scripting (XSS) attacks remotely by manipulating the affected function.

Impact Analysis

The vulnerability can allow an attacker to execute cross-site scripting attacks remotely, which may lead to limited integrity impacts such as injecting malicious scripts into web pages viewed by other users. This could potentially be used to hijack user sessions or perform other malicious actions, although the overall impact is rated as low to medium.

Mitigation Strategies

Apply the patch identified as 002def70b985f7012586df2c44368845bf405ab3 to resolve the issue.

Hi! I’m here to help you understand CVE-2025-13058. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70