CVE-2025-3806 | dazhouda lecms up to 3.0.3 Edit Profile /admin cross site scripting

April 18, 2025 Yanac

A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3. Affected by this issue is some unknown functionality of the file /admin of the component Edit Profile Handler. The manipulation leads to cross site scripting.

This vulnerability is handled as CVE-2025-3806. The attack may be launched remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More