CVE-2025-11291 is a Cross-Site Scripting (XSS) vulnerability found in ixmaps website2017, specifically within the /map.php file's HTTP GET Request Handler. This flaw allows remote attackers to inject malicious scripts by manipulating the 'trid' argument, impacting user integrity. Rated as Medium severity (CVSS 4.3), it requires user interaction but has low attack complexity and no confidentiality or availability impact. An exploit has been publicly released, but there is no evidence of active exploitation, nor significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Ixmaps | Website2017 | 0c71cffa0162186bc057a76766bc97e9f5a3a2d0CNA affected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.