CVE-2025-7865 | thinkgem JeeSite up to 5.12.0 XSS Filter EncodeUtils.java xssFilter text cross site scripting (Issue 32)

A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been declared as problematic. This vulnerability affects the function xssFilter of the file src/main/java/com/jeesite/common/codec/EncodeUtils.java of the component XSS Filter. The manipulation of the argument text leads to cross site scripting.

This vulnerability was named CVE-2025-7865. The attack can be initiated remotely. Furthermore, there is an exploit available.

It is recommended to apply a patch to fix this issue.