CVE-2025-10642

A vulnerability has been found in wangchenyi1996 chat_forum up to 80bdb92f5b460d36cab36e530a2c618acef5afd2. This impacts an unknown function of the file /q.php. Such manipulation of the argument path leads to cross site scripting. The attack may be launched remotely. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.

• CWE-79
• CWE-94

• https://github.com/wangchenyi1996/chat_forum/blob/master/q.php#L31
• https://vuldb.com/?ctiid.324675
• https://vuldb.com/?id.324675
• https://vuldb.com/?submit.651885

Published

Sep 18, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10637The Social Feed Gallery plugin for WordPress is vulnerable t…5.3
• CVE-2025-10638The NS Maintenance Mode for WP WordPress plugin through 1.3.…5.3
• CVE-2025-10639The WorkExaminer Professional server installation comes with…8.8
• CVE-2025-1064The Login/Signup Popup ( Inline Form + Woocommerce ) plugin …5.4
• CVE-2025-10640An unauthenticated attacker with access to TCP port 12306 of…9.8
• CVE-2025-10641All WorkExaminer Professional traffic between monitoring cli…7.1
• CVE-2025-10643Wondershare Repairit Incorrect Permission Assignment Authent…9.1
• CVE-2025-10644Wondershare Repairit SAS Token Incorrect Permission Assignme…9.4
• CVE-2025-10645The WP Reset plugin for WordPress is vulnerable to Sensitive…5.3
• CVE-2025-10646The Search Exclude plugin for WordPress is vulnerable to una…4.3
• CVE-2025-10647The Embed PDF for WPForms plugin for WordPress is vulnerable…8.8
• CVE-2025-10648The YourMembership Single Sign On – YM SSO Login plugin for …5.3