Daicuo

2 CVEs product

Monthly

CVE-2025-6865 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in DaiCuo up to 1.3.13. This affects an unknown part of the file /admin.php/addon/index. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

PHP CSRF Daicuo
NVD GitHub VulDB
CVSS 3.1
4.3
EPSS
0.1%
CVE-2025-3795 MEDIUM POC This Month

A vulnerability was found in DaiCuo 1.3.13. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Daicuo
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.4%
CVE-2025-6865
EPSS 0% CVSS 4.3
MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in DaiCuo up to 1.3.13. This affects an unknown part of the file /admin.php/addon/index. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

PHP CSRF Daicuo
NVD GitHub VulDB
CVE-2025-3795
EPSS 0% CVSS 4.8
MEDIUM POC This Month

A vulnerability was found in DaiCuo 1.3.13. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Daicuo
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy