CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-32785

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions prior to 6.3 are vulnerable to cross-site scripting (XSS) via the Address field in the Subscribed Lists group management section. An authenticated user can inject malicious JavaScript by adding a payload to the Address field when creating or editing a list entry. The vulnerability is triggered when another user navigates to the Tools section and performs a gravity database update. The Address field does not properly sanitize input, allowing special characters and script tags to bypass validation. This has been patched in version 6.3.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 10.0%

CVSS Severity

CVSS v3 Score 5.4

References

https://github.com/pi-hole/web/security/advisories/GHSA-7w6h-3gwc-qhq5

Products affected by CVE-2025-32785

Pi-Hole » Web Interface » Version: N/A

cpe:2.3:a:pi-hole:web_interface:-
Pi-Hole » Web Interface » Version: 0.1

cpe:2.3:a:pi-hole:web_interface:0.1
Pi-Hole » Web Interface » Version: 1.0

cpe:2.3:a:pi-hole:web_interface:1.0
Pi-Hole » Web Interface » Version: 1.0.0

cpe:2.3:a:pi-hole:web_interface:1.0.0
Pi-Hole » Web Interface » Version: 1.1

cpe:2.3:a:pi-hole:web_interface:1.1
Pi-Hole » Web Interface » Version: 1.1.0

cpe:2.3:a:pi-hole:web_interface:1.1.0
Pi-Hole » Web Interface » Version: 1.1.1

cpe:2.3:a:pi-hole:web_interface:1.1.1
Pi-Hole » Web Interface » Version: 1.1.2

cpe:2.3:a:pi-hole:web_interface:1.1.2
Pi-Hole » Web Interface » Version: 1.1.3

cpe:2.3:a:pi-hole:web_interface:1.1.3
Pi-Hole » Web Interface » Version: 1.1.4

cpe:2.3:a:pi-hole:web_interface:1.1.4
Pi-Hole » Web Interface » Version: 1.1.5

cpe:2.3:a:pi-hole:web_interface:1.1.5
Pi-Hole » Web Interface » Version: 1.1.6

cpe:2.3:a:pi-hole:web_interface:1.1.6
Pi-Hole » Web Interface » Version: 1.1.7

cpe:2.3:a:pi-hole:web_interface:1.1.7
Pi-Hole » Web Interface » Version: 1.2

cpe:2.3:a:pi-hole:web_interface:1.2
Pi-Hole » Web Interface » Version: 1.2.1

cpe:2.3:a:pi-hole:web_interface:1.2.1
Pi-Hole » Web Interface » Version: 1.3

cpe:2.3:a:pi-hole:web_interface:1.3
Pi-Hole » Web Interface » Version: 1.3.0

cpe:2.3:a:pi-hole:web_interface:1.3.0
Pi-Hole » Web Interface » Version: 1.4

cpe:2.3:a:pi-hole:web_interface:1.4
Pi-Hole » Web Interface » Version: 1.4.1

cpe:2.3:a:pi-hole:web_interface:1.4.1
Pi-Hole » Web Interface » Version: 1.4.2

cpe:2.3:a:pi-hole:web_interface:1.4.2
Pi-Hole » Web Interface » Version: 1.4.3

cpe:2.3:a:pi-hole:web_interface:1.4.3
Pi-Hole » Web Interface » Version: 1.4.3.1

cpe:2.3:a:pi-hole:web_interface:1.4.3.1
Pi-Hole » Web Interface » Version: 1.4.3.1a

cpe:2.3:a:pi-hole:web_interface:1.4.3.1a
Pi-Hole » Web Interface » Version: 1.4.4

cpe:2.3:a:pi-hole:web_interface:1.4.4
Pi-Hole » Web Interface » Version: 1.4.4.1

cpe:2.3:a:pi-hole:web_interface:1.4.4.1
Pi-Hole » Web Interface » Version: 1.4.4.2

cpe:2.3:a:pi-hole:web_interface:1.4.4.2
Pi-Hole » Web Interface » Version: 2.0.0

cpe:2.3:a:pi-hole:web_interface:2.0.0
Pi-Hole » Web Interface » Version: 2.0.1

cpe:2.3:a:pi-hole:web_interface:2.0.1
Pi-Hole » Web Interface » Version: 2.0.2

cpe:2.3:a:pi-hole:web_interface:2.0.2
Pi-Hole » Web Interface » Version: 2.0.3

cpe:2.3:a:pi-hole:web_interface:2.0.3
Pi-Hole » Web Interface » Version: 2.0.4

cpe:2.3:a:pi-hole:web_interface:2.0.4
Pi-Hole » Web Interface » Version: 2.0.5

cpe:2.3:a:pi-hole:web_interface:2.0.5
Pi-Hole » Web Interface » Version: 2.1.0

cpe:2.3:a:pi-hole:web_interface:2.1.0
Pi-Hole » Web Interface » Version: 2.1.1

cpe:2.3:a:pi-hole:web_interface:2.1.1
Pi-Hole » Web Interface » Version: 2.1.2

cpe:2.3:a:pi-hole:web_interface:2.1.2
Pi-Hole » Web Interface » Version: 2.2.0

cpe:2.3:a:pi-hole:web_interface:2.2.0
Pi-Hole » Web Interface » Version: 2.3

cpe:2.3:a:pi-hole:web_interface:2.3
Pi-Hole » Web Interface » Version: 2.3.1

cpe:2.3:a:pi-hole:web_interface:2.3.1
Pi-Hole » Web Interface » Version: 2.4

cpe:2.3:a:pi-hole:web_interface:2.4
Pi-Hole » Web Interface » Version: 2.5

cpe:2.3:a:pi-hole:web_interface:2.5
Pi-Hole » Web Interface » Version: 2.5.1

cpe:2.3:a:pi-hole:web_interface:2.5.1
Pi-Hole » Web Interface » Version: 2.5.2

cpe:2.3:a:pi-hole:web_interface:2.5.2
Pi-Hole » Web Interface » Version: 3.0

cpe:2.3:a:pi-hole:web_interface:3.0
Pi-Hole » Web Interface » Version: 3.0.1

cpe:2.3:a:pi-hole:web_interface:3.0.1
Pi-Hole » Web Interface » Version: 3.0.1a

cpe:2.3:a:pi-hole:web_interface:3.0.1a
Pi-Hole » Web Interface » Version: 3.1

cpe:2.3:a:pi-hole:web_interface:3.1
Pi-Hole » Web Interface » Version: 3.2

cpe:2.3:a:pi-hole:web_interface:3.2
Pi-Hole » Web Interface » Version: 3.2.1

cpe:2.3:a:pi-hole:web_interface:3.2.1
Pi-Hole » Web Interface » Version: 3.3

cpe:2.3:a:pi-hole:web_interface:3.3
Pi-Hole » Web Interface » Version: 4.0

cpe:2.3:a:pi-hole:web_interface:4.0
Pi-Hole » Web Interface » Version: 4.1

cpe:2.3:a:pi-hole:web_interface:4.1
Pi-Hole » Web Interface » Version: 4.1.1

cpe:2.3:a:pi-hole:web_interface:4.1.1
Pi-Hole » Web Interface » Version: 4.2

cpe:2.3:a:pi-hole:web_interface:4.2
Pi-Hole » Web Interface » Version: 4.3

cpe:2.3:a:pi-hole:web_interface:4.3
Pi-Hole » Web Interface » Version: 4.3.2

cpe:2.3:a:pi-hole:web_interface:4.3.2
Pi-Hole » Web Interface » Version: 4.3.3

cpe:2.3:a:pi-hole:web_interface:4.3.3
Pi-Hole » Web Interface » Version: 5.0

cpe:2.3:a:pi-hole:web_interface:5.0
Pi-Hole » Web Interface » Version: 5.1

cpe:2.3:a:pi-hole:web_interface:5.1
Pi-Hole » Web Interface » Version: 5.1.1

cpe:2.3:a:pi-hole:web_interface:5.1.1
Pi-Hole » Web Interface » Version: 5.10

cpe:2.3:a:pi-hole:web_interface:5.10
Pi-Hole » Web Interface » Version: 5.10.1

cpe:2.3:a:pi-hole:web_interface:5.10.1
Pi-Hole » Web Interface » Version: 5.11

cpe:2.3:a:pi-hole:web_interface:5.11
Pi-Hole » Web Interface » Version: 5.12

cpe:2.3:a:pi-hole:web_interface:5.12
Pi-Hole » Web Interface » Version: 5.13

cpe:2.3:a:pi-hole:web_interface:5.13
Pi-Hole » Web Interface » Version: 5.14

cpe:2.3:a:pi-hole:web_interface:5.14
Pi-Hole » Web Interface » Version: 5.14.1

cpe:2.3:a:pi-hole:web_interface:5.14.1
Pi-Hole » Web Interface » Version: 5.14.2

cpe:2.3:a:pi-hole:web_interface:5.14.2
Pi-Hole » Web Interface » Version: 5.15

cpe:2.3:a:pi-hole:web_interface:5.15
Pi-Hole » Web Interface » Version: 5.15.1

cpe:2.3:a:pi-hole:web_interface:5.15.1
Pi-Hole » Web Interface » Version: 5.16

cpe:2.3:a:pi-hole:web_interface:5.16
Pi-Hole » Web Interface » Version: 5.17

cpe:2.3:a:pi-hole:web_interface:5.17
Pi-Hole » Web Interface » Version: 5.18

cpe:2.3:a:pi-hole:web_interface:5.18
Pi-Hole » Web Interface » Version: 5.18.1

cpe:2.3:a:pi-hole:web_interface:5.18.1
Pi-Hole » Web Interface » Version: 5.18.2

cpe:2.3:a:pi-hole:web_interface:5.18.2
Pi-Hole » Web Interface » Version: 5.18.3

cpe:2.3:a:pi-hole:web_interface:5.18.3
Pi-Hole » Web Interface » Version: 5.2

cpe:2.3:a:pi-hole:web_interface:5.2
Pi-Hole » Web Interface » Version: 5.2.1

cpe:2.3:a:pi-hole:web_interface:5.2.1
Pi-Hole » Web Interface » Version: 5.2.2

cpe:2.3:a:pi-hole:web_interface:5.2.2
Pi-Hole » Web Interface » Version: 5.3

cpe:2.3:a:pi-hole:web_interface:5.3
Pi-Hole » Web Interface » Version: 5.3.1

cpe:2.3:a:pi-hole:web_interface:5.3.1
Pi-Hole » Web Interface » Version: 5.3.2

cpe:2.3:a:pi-hole:web_interface:5.3.2
Pi-Hole » Web Interface » Version: 5.4

cpe:2.3:a:pi-hole:web_interface:5.4
Pi-Hole » Web Interface » Version: 5.5

cpe:2.3:a:pi-hole:web_interface:5.5
Pi-Hole » Web Interface » Version: 5.5.1

cpe:2.3:a:pi-hole:web_interface:5.5.1
Pi-Hole » Web Interface » Version: 5.6

cpe:2.3:a:pi-hole:web_interface:5.6
Pi-Hole » Web Interface » Version: 5.7

cpe:2.3:a:pi-hole:web_interface:5.7
Pi-Hole » Web Interface » Version: 5.8

cpe:2.3:a:pi-hole:web_interface:5.8
Pi-Hole » Web Interface » Version: 5.9

cpe:2.3:a:pi-hole:web_interface:5.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-32785

Products

Pricing

Contact Us