Browse all 4 CVE security advisories affecting butterflymedia. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Butterflymedia develops digital marketing solutions with a core focus on web-based advertising platforms and content management systems. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and insecure authentication mechanisms. While no major public security incidents have been widely documented, their CVE history indicates consistent issues with sanitization and access control. The company's security posture appears to prioritize functionality over robustness, with recurring flaws in user interaction points that could allow attackers to compromise systems or escalate privileges within their environments.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-5842 | Modern Design Library <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter — Modern Design LibraryCWE-79 | 6.4 | Medium | 2025-06-26 |
This page lists every published CVE security advisory associated with butterflymedia. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.