CVE-2025-1742

A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file /home.php. The manipulation of the argument page_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79
• CWE-94

• https://github.com/janssensjelle/published-pocs/blob/main/pihomehvac_xss_home.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.297830Permissions Required, VDB Entry
• https://vuldb.com/?id.297830Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.502501Third Party Advisory, VDB Entry

Published

Feb 27, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1736In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, f…7.3
• CVE-2025-1737Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-1738A Password Transmitted over Query String vulnerability has b…6.2
• CVE-2025-1739An Authentication Bypass vulnerability has been found in Tri…7.1
• CVE-2025-1740Improper Restriction of Excessive Authentication Attempts vu…9.8
• CVE-2025-1741A vulnerability classified as problematic was found in b1gMa…5.1
• CVE-2025-1743A vulnerability, which was classified as critical, was found…6.9
• CVE-2025-1744Out-of-bounds Write vulnerability in radareorg radare2 allow…9.8
• CVE-2025-1745A vulnerability has been found in LinZhaoguan pb-cms 2.0 and…5.3
• CVE-2025-1746Cross-Site Scripting vulnerability in OpenCart versions prio…6.1
• CVE-2025-1747HTML injection vulnerabilities in OpenCart versions prior to…4.7
• CVE-2025-1748HTML injection vulnerabilities in OpenCart versions prior to…4.7