Medium · 6.1 CVE-2025-51962 EUVD-2025-203408GHSA-mv8j-mv8v-2vvx

A HTML Injection vulnerability in the comment section of the project page in MicroStudio 24.01.29 allows remote attackers to inject arbitra…

Published Dec 15, 2025 · Updated Dec 16, 2025 · Assigned by mitre

Description

A HTML Injection vulnerability in the comment section of the project page in MicroStudio 24.01.29 allows remote attackers to inject arbitrary web script or HTML via the text parameter of add_project_comment function.

References

https://github.com/pmgl/microstudio/
https://github.com/Sunnyshineshow/vulnerability-research/blob/main/CVE-2025-51962/CVE-2025-51962.md