CVE-2025-13058

A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of the component Filename Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The patch is identified as 002def70b985f7012586df2c44368845bf405ab3. Applying a patch is advised to resolve this issue.

• CWE-79
• CWE-94
• CWE-79

• https://github.com/soerennb/extplorer/
• https://github.com/soerennb/extplorer/commit/002def70b985f7012586df2c44368845bf405ab3Patch
• https://github.com/soerennb/extplorer/issues/33Exploit, Issue Tracking
• https://vuldb.com/?ctiid.332185Permissions Required, VDB Entry
• https://vuldb.com/?id.332185Third Party Advisory, US Government Resource
• https://vuldb.com/?submit.682370Third Party Advisory, US Government Resource
• https://github.com/soerennb/extplorer/issues/33Exploit, Issue Tracking

Published

Nov 12, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-13051When the service of ABP and AES is installed in a directory …9.3
• CVE-2025-13052When the user set the Notification's sender to send emails t…5.9
• CVE-2025-13053When a user configures the NAS to retrieve UPS status or con…3.7
• CVE-2025-13054The User Profile Builder – Beautiful User Registration Forms…6.4
• CVE-2025-13056Improper Neutralization of Input During Web Page Generation …4.8
• CVE-2025-13057A vulnerability was identified in Campcodes School Fees Paym…9.8
• CVE-2025-13059A weakness has been identified in SourceCodester Alumni Mana…9.8
• CVE-2025-1306The Newscrunch theme for WordPress is vulnerable to Cross-Si…8.8
• CVE-2025-13060A security vulnerability has been detected in SourceCodester…9.8
• CVE-2025-13061A vulnerability was detected in itsourcecode Online Voting S…8.8
• CVE-2025-13062The Supreme Modules Lite plugin for WordPress is vulnerable …8.8
• CVE-2025-13063A flaw has been found in DinukaNavaratna Dee Store 1.0. Affe…7.3