CVE-2025-45661

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-45661
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-45661.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-45661
Published
2025-06-18T14:15:44Z
Modified
2025-07-04T04:52:01.578433Z
Summary
[none]
Details

A cross-site scripting (XSS) vulnerability in miniTCG v1.3.1 beta allows attackers to execute abritrary web scripts or HTML via injecting a crafted payload into the id parameter at /members/edit.php.

References

Affected packages

Git / github.com/nekocari/minitcg

Affected ranges

Type
GIT
Repo
https://github.com/nekocari/minitcg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

v1.*

v1.0.0-beta
v1.1.0-beta
v1.2.0-beta
v1.2.1-beta
v1.3.0-beta
v1.3.1-beta