CVE-2025-15452 | xnx3 wangmarket up to 4.9 Backend Variable Search variableList.do variableList Description cross site scripting

A vulnerability described as problematic has been identified in xnx3 wangmarket up to 4.9. This affects the function variableList of the file /admin/system/variableList.do of the component Backend Variable Search. Executing manipulation of the argument Description can lead to cross site scripting.

The identification of this vulnerability is CVE-2025-15452. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.