CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-53533

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions 6.2.1 and earlier are vulnerable to reflected cross-site scripting (XSS) via a malformed URL path. The 404 error page includes the requested path in the class attribute of the body tag without proper sanitization or escaping. An attacker can craft a URL containing an onload attribute that will execute arbitrary JavaScript code in the browser when a victim visits the malicious link. If an attacker sends a crafted pi-hole link to a victim and the victim visits it, attacker-controlled JavaScript code is executed in the browser of the victim. This has been patched in version 6.3.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 14.2%

CVSS Severity

CVSS v3 Score 6.1

References

https://github.com/pi-hole/web/security/advisories/GHSA-w8f8-92rx-4f6w

Products affected by CVE-2025-53533

Pi-Hole » Web Interface » Version: N/A

cpe:2.3:a:pi-hole:web_interface:-
Pi-Hole » Web Interface » Version: 0.1

cpe:2.3:a:pi-hole:web_interface:0.1
Pi-Hole » Web Interface » Version: 1.0

cpe:2.3:a:pi-hole:web_interface:1.0
Pi-Hole » Web Interface » Version: 1.0.0

cpe:2.3:a:pi-hole:web_interface:1.0.0
Pi-Hole » Web Interface » Version: 1.1

cpe:2.3:a:pi-hole:web_interface:1.1
Pi-Hole » Web Interface » Version: 1.1.0

cpe:2.3:a:pi-hole:web_interface:1.1.0
Pi-Hole » Web Interface » Version: 1.1.1

cpe:2.3:a:pi-hole:web_interface:1.1.1
Pi-Hole » Web Interface » Version: 1.1.2

cpe:2.3:a:pi-hole:web_interface:1.1.2
Pi-Hole » Web Interface » Version: 1.1.3

cpe:2.3:a:pi-hole:web_interface:1.1.3
Pi-Hole » Web Interface » Version: 1.1.4

cpe:2.3:a:pi-hole:web_interface:1.1.4
Pi-Hole » Web Interface » Version: 1.1.5

cpe:2.3:a:pi-hole:web_interface:1.1.5
Pi-Hole » Web Interface » Version: 1.1.6

cpe:2.3:a:pi-hole:web_interface:1.1.6
Pi-Hole » Web Interface » Version: 1.1.7

cpe:2.3:a:pi-hole:web_interface:1.1.7
Pi-Hole » Web Interface » Version: 1.2

cpe:2.3:a:pi-hole:web_interface:1.2
Pi-Hole » Web Interface » Version: 1.2.1

cpe:2.3:a:pi-hole:web_interface:1.2.1
Pi-Hole » Web Interface » Version: 1.3

cpe:2.3:a:pi-hole:web_interface:1.3
Pi-Hole » Web Interface » Version: 1.3.0

cpe:2.3:a:pi-hole:web_interface:1.3.0
Pi-Hole » Web Interface » Version: 1.4

cpe:2.3:a:pi-hole:web_interface:1.4
Pi-Hole » Web Interface » Version: 1.4.1

cpe:2.3:a:pi-hole:web_interface:1.4.1
Pi-Hole » Web Interface » Version: 1.4.2

cpe:2.3:a:pi-hole:web_interface:1.4.2
Pi-Hole » Web Interface » Version: 1.4.3

cpe:2.3:a:pi-hole:web_interface:1.4.3
Pi-Hole » Web Interface » Version: 1.4.3.1

cpe:2.3:a:pi-hole:web_interface:1.4.3.1
Pi-Hole » Web Interface » Version: 1.4.3.1a

cpe:2.3:a:pi-hole:web_interface:1.4.3.1a
Pi-Hole » Web Interface » Version: 1.4.4

cpe:2.3:a:pi-hole:web_interface:1.4.4
Pi-Hole » Web Interface » Version: 1.4.4.1

cpe:2.3:a:pi-hole:web_interface:1.4.4.1
Pi-Hole » Web Interface » Version: 1.4.4.2

cpe:2.3:a:pi-hole:web_interface:1.4.4.2
Pi-Hole » Web Interface » Version: 2.0.0

cpe:2.3:a:pi-hole:web_interface:2.0.0
Pi-Hole » Web Interface » Version: 2.0.1

cpe:2.3:a:pi-hole:web_interface:2.0.1
Pi-Hole » Web Interface » Version: 2.0.2

cpe:2.3:a:pi-hole:web_interface:2.0.2
Pi-Hole » Web Interface » Version: 2.0.3

cpe:2.3:a:pi-hole:web_interface:2.0.3
Pi-Hole » Web Interface » Version: 2.0.4

cpe:2.3:a:pi-hole:web_interface:2.0.4
Pi-Hole » Web Interface » Version: 2.0.5

cpe:2.3:a:pi-hole:web_interface:2.0.5
Pi-Hole » Web Interface » Version: 2.1.0

cpe:2.3:a:pi-hole:web_interface:2.1.0
Pi-Hole » Web Interface » Version: 2.1.1

cpe:2.3:a:pi-hole:web_interface:2.1.1
Pi-Hole » Web Interface » Version: 2.1.2

cpe:2.3:a:pi-hole:web_interface:2.1.2
Pi-Hole » Web Interface » Version: 2.2.0

cpe:2.3:a:pi-hole:web_interface:2.2.0
Pi-Hole » Web Interface » Version: 2.3

cpe:2.3:a:pi-hole:web_interface:2.3
Pi-Hole » Web Interface » Version: 2.3.1

cpe:2.3:a:pi-hole:web_interface:2.3.1
Pi-Hole » Web Interface » Version: 2.4

cpe:2.3:a:pi-hole:web_interface:2.4
Pi-Hole » Web Interface » Version: 2.5

cpe:2.3:a:pi-hole:web_interface:2.5
Pi-Hole » Web Interface » Version: 2.5.1

cpe:2.3:a:pi-hole:web_interface:2.5.1
Pi-Hole » Web Interface » Version: 2.5.2

cpe:2.3:a:pi-hole:web_interface:2.5.2
Pi-Hole » Web Interface » Version: 3.0

cpe:2.3:a:pi-hole:web_interface:3.0
Pi-Hole » Web Interface » Version: 3.0.1

cpe:2.3:a:pi-hole:web_interface:3.0.1
Pi-Hole » Web Interface » Version: 3.0.1a

cpe:2.3:a:pi-hole:web_interface:3.0.1a
Pi-Hole » Web Interface » Version: 3.1

cpe:2.3:a:pi-hole:web_interface:3.1
Pi-Hole » Web Interface » Version: 3.2

cpe:2.3:a:pi-hole:web_interface:3.2
Pi-Hole » Web Interface » Version: 3.2.1

cpe:2.3:a:pi-hole:web_interface:3.2.1
Pi-Hole » Web Interface » Version: 3.3

cpe:2.3:a:pi-hole:web_interface:3.3
Pi-Hole » Web Interface » Version: 4.0

cpe:2.3:a:pi-hole:web_interface:4.0
Pi-Hole » Web Interface » Version: 4.1

cpe:2.3:a:pi-hole:web_interface:4.1
Pi-Hole » Web Interface » Version: 4.1.1

cpe:2.3:a:pi-hole:web_interface:4.1.1
Pi-Hole » Web Interface » Version: 4.2

cpe:2.3:a:pi-hole:web_interface:4.2
Pi-Hole » Web Interface » Version: 4.3

cpe:2.3:a:pi-hole:web_interface:4.3
Pi-Hole » Web Interface » Version: 4.3.2

cpe:2.3:a:pi-hole:web_interface:4.3.2
Pi-Hole » Web Interface » Version: 4.3.3

cpe:2.3:a:pi-hole:web_interface:4.3.3
Pi-Hole » Web Interface » Version: 5.0

cpe:2.3:a:pi-hole:web_interface:5.0
Pi-Hole » Web Interface » Version: 5.1

cpe:2.3:a:pi-hole:web_interface:5.1
Pi-Hole » Web Interface » Version: 5.1.1

cpe:2.3:a:pi-hole:web_interface:5.1.1
Pi-Hole » Web Interface » Version: 5.10

cpe:2.3:a:pi-hole:web_interface:5.10
Pi-Hole » Web Interface » Version: 5.10.1

cpe:2.3:a:pi-hole:web_interface:5.10.1
Pi-Hole » Web Interface » Version: 5.11

cpe:2.3:a:pi-hole:web_interface:5.11
Pi-Hole » Web Interface » Version: 5.12

cpe:2.3:a:pi-hole:web_interface:5.12
Pi-Hole » Web Interface » Version: 5.13

cpe:2.3:a:pi-hole:web_interface:5.13
Pi-Hole » Web Interface » Version: 5.14

cpe:2.3:a:pi-hole:web_interface:5.14
Pi-Hole » Web Interface » Version: 5.14.1

cpe:2.3:a:pi-hole:web_interface:5.14.1
Pi-Hole » Web Interface » Version: 5.14.2

cpe:2.3:a:pi-hole:web_interface:5.14.2
Pi-Hole » Web Interface » Version: 5.15

cpe:2.3:a:pi-hole:web_interface:5.15
Pi-Hole » Web Interface » Version: 5.15.1

cpe:2.3:a:pi-hole:web_interface:5.15.1
Pi-Hole » Web Interface » Version: 5.16

cpe:2.3:a:pi-hole:web_interface:5.16
Pi-Hole » Web Interface » Version: 5.17

cpe:2.3:a:pi-hole:web_interface:5.17
Pi-Hole » Web Interface » Version: 5.18

cpe:2.3:a:pi-hole:web_interface:5.18
Pi-Hole » Web Interface » Version: 5.18.1

cpe:2.3:a:pi-hole:web_interface:5.18.1
Pi-Hole » Web Interface » Version: 5.18.2

cpe:2.3:a:pi-hole:web_interface:5.18.2
Pi-Hole » Web Interface » Version: 5.18.3

cpe:2.3:a:pi-hole:web_interface:5.18.3
Pi-Hole » Web Interface » Version: 5.2

cpe:2.3:a:pi-hole:web_interface:5.2
Pi-Hole » Web Interface » Version: 5.2.1

cpe:2.3:a:pi-hole:web_interface:5.2.1
Pi-Hole » Web Interface » Version: 5.2.2

cpe:2.3:a:pi-hole:web_interface:5.2.2
Pi-Hole » Web Interface » Version: 5.3

cpe:2.3:a:pi-hole:web_interface:5.3
Pi-Hole » Web Interface » Version: 5.3.1

cpe:2.3:a:pi-hole:web_interface:5.3.1
Pi-Hole » Web Interface » Version: 5.3.2

cpe:2.3:a:pi-hole:web_interface:5.3.2
Pi-Hole » Web Interface » Version: 5.4

cpe:2.3:a:pi-hole:web_interface:5.4
Pi-Hole » Web Interface » Version: 5.5

cpe:2.3:a:pi-hole:web_interface:5.5
Pi-Hole » Web Interface » Version: 5.5.1

cpe:2.3:a:pi-hole:web_interface:5.5.1
Pi-Hole » Web Interface » Version: 5.6

cpe:2.3:a:pi-hole:web_interface:5.6
Pi-Hole » Web Interface » Version: 5.7

cpe:2.3:a:pi-hole:web_interface:5.7
Pi-Hole » Web Interface » Version: 5.8

cpe:2.3:a:pi-hole:web_interface:5.8
Pi-Hole » Web Interface » Version: 5.9

cpe:2.3:a:pi-hole:web_interface:5.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-53533

Products

Pricing

Contact Us