CVE-2025-66470
Cross-site scripting in Zauberzeug Nicegui
CVSS score
6.1
EPSS probability
%0.3
Risk score
0.0
Published
10 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
A fast, simple scanner for detecting CVE-2025-66470 - XSS vulnerability in NiceGUI's ui.interactive_image component. (★1)
Makefile Go / Python
https://github.com/zauberzeug/nicegui/security/advisories/GHSA-2m4f-cg75-76w2
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2025-66645Path traversal in Zauberzeug Nicegui
Patch verified Public Exploits:1EPSS %1
7.5
CVE-2026-39844Path traversal in Zauberzeug Nicegui
Patch verifiedEPSS %0
6.1
CVE-2025-66469Cross-site scripting in Zauberzeug Nicegui
Patch verified Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-66470"