Vulnerability details
CVE-2025-59424
Kovah LinkAce
LinkAce Vulnerable to Stored XSS on the Audit Page
CVSS 3.1
7.3High
Official description
LinkAce is a self-hosted archive to collect website links. Prior to 2.3.1, a Stored Cross-Site Scripting (XSS) vulnerability has been identified on the /system/audit page. The application fails to properly sanitize the username field before it is rendered in the audit log. An authenticated attacker can set a malicious JavaScript payload as their username. When an action performed by this user is recorded (e.g., generate or revoke an API token), the payload is stored in the database. The script is then executed in the browser of any user, particularly administrators, who views the /system/audit page. This vulnerability is fixed in 2.3.1.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.3High | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Kovah | LinkAce | < 2.3.1 | CVEProject cvelistV5 (CNA) |
References and advisories
2- https://github.com/Kovah/LinkAce/security/advisories/GHSA-289g-9gff-p4wh x_refsource_CONFIRM
- https://github.com/Kovah/LinkAce/commit/c0d21b974b32f1ca2fab550fb476c573a068e196 x_refsource_MISC
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-09-18
- Last updated
- 2025-09-18
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.35%
Probability of exploitation in 30 days
28.9%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Proof of concept
- Technical impact
- Total
Weaknesses (CWE)
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')