CVE-2026-25616 PoC — Blesta 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25616.yaml

Associated Vulnerability

Title:Blesta 跨站脚本漏洞 (CVE-2026-25616)
Description:Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.

Description

Blesta 3.x through 5.x before 5.13.3 contains an input validation vulnerability caused by mishandling input, letting attackers potentially exploit the system, exploit requires unspecified conditions.

File Snapshot


 id: CVE-2026-25616

info:
  name: Blesta <= 5.13.1 - Cross-Site Scripting
  author: 0x_Akoko
  sever

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →