A vulnerability was found in xnx3 wangmarket up to 6.4 and classified as problematic. This affects an unknown function of the file /siteVar/save.do of the component Add Global Variable Handler. The manipulation of the argument Remark/Variable Value results in cross site scripting.
This vulnerability is identified as CVE-2025-15416. The attack can be executed remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
