Back to the CVE list
CVE-2025-63830

Cross-site scripting in Cksource Ckfinder

CVSS score

6.1

EPSS probability

%0.3

Risk score

0.0

Published

11 mo ago

OverviewPublic Exploits (2)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
Shubham03007/CVE-2025-63830
GitHub

Identified a Stored Cross-Site Scripting (XSS) vulnerability in CKFinder v1.4.3 via malicious SVG file upload leading to script execution upon file preview. (★0)

Public PoCSource updated: 12.11.2025 19:41:04
G
Shubham03007/CVE-2025-63830/blob/main/README.md
GitHub

https://github.com/Shubham03007/CVE-2025-63830/blob/main/README.md

Exploit reference

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-63830"