CVE-2025-57692: Dotnetfoundation Piranha CMS

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.

Affected products

• Dotnetfoundation Piranha CMS: version 12.0 only

Published 2025-09-26. Last modified 2026-06-17.