CVE-2025-11946
Cross-site scripting in Logicaldoc
CVSS score
5.4
EPSS probability
%0.4
Risk score
0.0
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://gist.github.com/thezeekhan/231d87163fbb84f94c9c94f13b88db90
Makefile Go / Python
https://gist.github.com/thezeekhan/231d87163fbb84f94c9c94f13b88db90#steps-to-reproduce
Makefile Go / Python
Similar Vulnerabilities
8.1
CVE-2025-12547
Vulnerability in Logicaldoc
L
Patch status unknown Public Exploits:1EPSS %1
8.6
CVE-2024-54448
Remote Code Execution (RCE) via Automation Scripting
L
Patch status unknownEPSS %1
8.7
CVE-2026-109205
LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet
L
Patch verifiedEPSS %0
8.7
CVE-2026-109199
LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template
L
Patch verifiedEPSS %0
8.7
CVE-2026-109201
LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService
L
Patch verifiedEPSS %0
7.1
CVE-2026-109170
LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter
L
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-11946"