HIGH Published November 3, 2025

CVE-2025-63441

Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint u/administrator/friends.

CVSS base score
7.3 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-79
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Affected products

opensource-socialnetwork open source social network

References

View full NVD advisory →

More opensource-socialnetwork vulnerabilities

Published the same day

Related reading

← Back to CVE watch