CVE-2025-60645
Cross-site request forgery in Xuxueli Xxl API
CVSS score
6.5
EPSS probability
%0.2
Risk score
0.0
Published
11 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://gist.github.com/LockeTom/77fb982a49dee956101810bbefa09fb4
Makefile Go / Python
Similar Vulnerabilities
8.8
CVE-2023-33779Incorrect authorization in Xuxueli Xxl Job
Patch status unknown Public Exploits:1EPSS %1
5.3
5.3
CVE-2026-90487Xuxueli xxl-job JobGroupController.java privileges management
Patch status unknownEPSS %0
5.1
CVE-2026-94426xuxueli xxl-job insert cross site scripting
Patch status unknownEPSS %0
5.1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-60645"