CVE-2025-2340

A vulnerability was found in otale Tale Blog 2.0.5. It has been declared as problematic. This vulnerability affects the function saveOptions of the file /options/save of the component Site Settings. The manipulation of the argument Site Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-79
• CWE-94
• CWE-79

• https://github.com/qkdjksfkeg/cve_article/blob/main/Tale/XSS.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.299806Permissions Required, VDB Entry
• https://vuldb.com/?id.299806Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.514793Third Party Advisory, VDB Entry

Published

Mar 16, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-23394A UNIX Symbolic Link (Symlink) Following vulnerability in op…9.8
• CVE-2025-23395Screen 5.0.0 when it runs with setuid-root privileges does n…7.8
• CVE-2025-23396A vulnerability has been identified in Teamcenter Visualizat…7.8
• CVE-2025-23397A vulnerability has been identified in Teamcenter Visualizat…7.8
• CVE-2025-23398A vulnerability has been identified in Teamcenter Visualizat…7.8
• CVE-2025-23399A vulnerability has been identified in Teamcenter Visualizat…7.8
• CVE-2025-23400A vulnerability has been identified in Teamcenter Visualizat…7.8
• CVE-2025-23401A vulnerability has been identified in Teamcenter Visualizat…7.8
• CVE-2025-23402A vulnerability has been identified in Teamcenter Visualizat…7.8
• CVE-2025-23403A vulnerability has been identified in SIMATIC IPC DiagBase …7.3
• CVE-2025-23405Unauthenticated log effects metrics gathering incident respo…6.9
• CVE-2025-23406Out-of-bounds read vulnerability caused by improper checking…5.3