CVE-2025-57520
1 advisory.
npm/decap-cms CVE-2025-57520: medium 6.1, EPSS 0.33%
Decap CMS Cross Site Scripting (XSS) vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.8.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xp8g-32qh-mv28
- https://nvd.nist.gov/vuln/detail/CVE-2025-57520
- https://github.com/decaporg/decap-cms
- https://onurcangenc.com.tr/posts/cve-2025-57520--stored-xss-in-decap-cms-3-8-3
CVE-2025-57520 · published · modified · JSON