Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-67342

RuoYi versions 4.8.1 and earlier is affected by a stored XSS vulnerability in the /system/menu/edit endpoint. While the endpoint is protected by an XSS filter, the protection can be bypassed. Additionally, because the menu is shared across all users, any user with menu modification permissions can impact all users by exploiting this stored XSS vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.8%
CVSS Severity
CVSS v3 Score 4.6
Products affected by CVE-2025-67342
  • Ruoyi » Ruoyi » Version: N/A
    cpe:2.3:a:ruoyi:ruoyi:-
  • Ruoyi » Ruoyi » Version: 2.2
    cpe:2.3:a:ruoyi:ruoyi:2.2
  • Ruoyi » Ruoyi » Version: 2.3
    cpe:2.3:a:ruoyi:ruoyi:2.3
  • Ruoyi » Ruoyi » Version: 2.4
    cpe:2.3:a:ruoyi:ruoyi:2.4
  • Ruoyi » Ruoyi » Version: 3.0
    cpe:2.3:a:ruoyi:ruoyi:3.0
  • Ruoyi » Ruoyi » Version: 3.1
    cpe:2.3:a:ruoyi:ruoyi:3.1
  • Ruoyi » Ruoyi » Version: 3.2
    cpe:2.3:a:ruoyi:ruoyi:3.2
  • Ruoyi » Ruoyi » Version: 3.3
    cpe:2.3:a:ruoyi:ruoyi:3.3
  • Ruoyi » Ruoyi » Version: 3.4
    cpe:2.3:a:ruoyi:ruoyi:3.4
  • Ruoyi » Ruoyi » Version: 3.4.0
    cpe:2.3:a:ruoyi:ruoyi:3.4.0
  • Ruoyi » Ruoyi » Version: 4.0
    cpe:2.3:a:ruoyi:ruoyi:4.0
  • Ruoyi » Ruoyi » Version: 4.1
    cpe:2.3:a:ruoyi:ruoyi:4.1
  • Ruoyi » Ruoyi » Version: 4.2
    cpe:2.3:a:ruoyi:ruoyi:4.2
  • Ruoyi » Ruoyi » Version: 4.3
    cpe:2.3:a:ruoyi:ruoyi:4.3
  • Ruoyi » Ruoyi » Version: 4.3.1
    cpe:2.3:a:ruoyi:ruoyi:4.3.1
  • Ruoyi » Ruoyi » Version: 4.4
    cpe:2.3:a:ruoyi:ruoyi:4.4
  • Ruoyi » Ruoyi » Version: 4.5.0
    cpe:2.3:a:ruoyi:ruoyi:4.5.0
  • Ruoyi » Ruoyi » Version: 4.5.1
    cpe:2.3:a:ruoyi:ruoyi:4.5.1
  • Ruoyi » Ruoyi » Version: 4.6.0
    cpe:2.3:a:ruoyi:ruoyi:4.6.0
  • Ruoyi » Ruoyi » Version: 4.6.1
    cpe:2.3:a:ruoyi:ruoyi:4.6.1
  • Ruoyi » Ruoyi » Version: 4.6.2
    cpe:2.3:a:ruoyi:ruoyi:4.6.2
  • Ruoyi » Ruoyi » Version: 4.7.0
    cpe:2.3:a:ruoyi:ruoyi:4.7.0
  • Ruoyi » Ruoyi » Version: 4.7.1
    cpe:2.3:a:ruoyi:ruoyi:4.7.1
  • Ruoyi » Ruoyi » Version: 4.7.2
    cpe:2.3:a:ruoyi:ruoyi:4.7.2
  • Ruoyi » Ruoyi » Version: 4.7.3
    cpe:2.3:a:ruoyi:ruoyi:4.7.3
  • Ruoyi » Ruoyi » Version: 4.7.4
    cpe:2.3:a:ruoyi:ruoyi:4.7.4
  • Ruoyi » Ruoyi » Version: 4.7.5
    cpe:2.3:a:ruoyi:ruoyi:4.7.5
  • Ruoyi » Ruoyi » Version: 4.7.6
    cpe:2.3:a:ruoyi:ruoyi:4.7.6
  • Ruoyi » Ruoyi » Version: 4.7.7
    cpe:2.3:a:ruoyi:ruoyi:4.7.7
  • Ruoyi » Ruoyi » Version: 4.7.8
    cpe:2.3:a:ruoyi:ruoyi:4.7.8
  • Ruoyi » Ruoyi » Version: 4.7.9
    cpe:2.3:a:ruoyi:ruoyi:4.7.9
  • Ruoyi » Ruoyi » Version: 4.8.0
    cpe:2.3:a:ruoyi:ruoyi:4.8.0
  • Ruoyi » Ruoyi » Version: 4.8.1
    cpe:2.3:a:ruoyi:ruoyi:4.8.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved