{"vulnerability": "CVE-2025-27412", "sightings": [{"uuid": "6e87d64f-3655-4e13-830f-0897630b055c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljnrdrl53e2b", "content": "", "creation_timestamp": "2025-03-05T19:59:25.506894Z"}, {"uuid": "8fc6219e-c55b-413b-9aad-073b26535d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27412", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:24.000000Z"}, {"uuid": "a5af6d03-ece8-43ea-91e8-d4cdca972b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27412", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:48.000000Z"}, {"uuid": "78f2f996-9363-4242-ba70-99359ba90f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27412", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6557", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27412\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: REDAXO is a PHP-based CMS. In Redaxo from 5.0.0 through 5.18.2, the rex-api-result parameter is vulnerable to Reflected cross-site scripting (XSS) on the page of AddOns. This vulnerability is fixed in 5.18.3.\n\ud83d\udccf Published: 2025-03-05T15:53:08.813Z\n\ud83d\udccf Modified: 2025-03-05T16:18:31.199Z\n\ud83d\udd17 References:\n1. https://github.com/redaxo/redaxo/security/advisories/GHSA-8366-xmgf-334f", "creation_timestamp": "2025-03-05T16:32:21.000000Z"}, {"uuid": "aa177de3-a8a9-4754-8b40-d04cee610a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27412", "type": "seen", "source": "https://t.me/cvedetector/19638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27412 - REDAXO Reflected Cross-Site Scripting (XSS) in rex-api-result Parameter\", \n  \"Content\": \"CVE ID : CVE-2025-27412 \nPublished : March 5, 2025, 4:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : REDAXO is a PHP-based CMS. In Redaxo from 5.0.0 through 5.18.2, the rex-api-result parameter is vulnerable to Reflected cross-site scripting (XSS) on the page of AddOns. This vulnerability is fixed in 5.18.3. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T18:36:58.000000Z"}, {"uuid": "9be4ac44-9581-45d5-afc2-f6d5656f538f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27412", "type": "published-proof-of-concept", "source": "https://github.com/redaxo/core/security/advisories/GHSA-8366-xmgf-334f", "content": "", "creation_timestamp": "2025-03-05T09:03:49.000000Z"}]}