CVE-2025-32015

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, HTML is sanitized improperly inside the `<iframe srcdoc>` attribute, which leads to cross-site scripting (XSS) by loading an attacker's UserJS inside `<script src>`. In order to execute the attack, the attacker needs to control one of the victim's feeds and have an account on the FreshRSS instance that the victim is using. An attacker can gain access to the victim's account by exploiting this vulnerability. If the victim is an admin it would be possible to delete all users (cause damage) or execute arbitrary code on the server by modifying the update URL using fetch() via the XSS. Version 1.26.2 contains a patch for the issue.

• CWE-79

• https://github.com/FreshRSS/FreshRSS/commit/54e2f9107d03c5b3bb260f38fdb2736bce449fd4Patch
• https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-wgrq-mcwc-8f8vExploit, Vendor Advisory

Published

Jun 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-3201The Contact Form builder with drag & drop for WordPress Wor…5.9
• CVE-2025-32010A stack-based buffer overflow vulnerability exists in the Cl…9.8
• CVE-2025-32011KUNBUS PiCtory versions 2.5.0 through 2.11.1 have an authent…9.8
• CVE-2025-32012Jellyfin is an open source self hosted media server. In vers…7.5
• CVE-2025-32013LNbits is a Lightning wallet and accounts system. A Server-S…7.5
• CVE-2025-32014estree-util-value-to-estree converts a JavaScript value to a…6.9
• CVE-2025-32016Microsoft Identity Web is a library which contains a set of …4.7
• CVE-2025-32017Umbraco is a free and open source .NET content management sy…8.8
• CVE-2025-32018Cursor is a code editor built for programming with AI. In ve…8
• CVE-2025-32019Harbor is an open source trusted cloud native registry proje…4.1
• CVE-2025-3202A vulnerability classified as critical has been found in age…9.1
• CVE-2025-32020The crud-query-parser library parses query parameters from H…9.3