CVE-2025-3489

CVE-2025-3489 is a Cross-Site Scripting (XSS) vulnerability affecting Nababur Simple-User-Management-System version 1.0, specifically within the /register.php file. An attacker can exploit this by manipulating the 'name' or 'username' argument, leading to remote code execution in the victim's browser. Rated as MEDIUM severity (CVSS 6.1), this vulnerability requires user interaction (UI:R) but can be exploited remotely (AV:N) with low attack complexity (AC:L). The potential impact includes low confidentiality and integrity compromise (C:L/I:L), allowing for data theft or unauthorized actions within the user's session. While the exploit has been publicly disclosed, there is no evidence of active exploitation, and no known Metasploit, Nuclei, or ExploitDB modules exist. Community discussion and media coverage are minimal, indicating low public attention despite the vendor's unresponsiveness to early disclosure.