CVE-2025-63441: Opensource-Socialnetwork Open Source Social Network

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint u/administrator/friends.

Affected products

• Opensource-Socialnetwork Open Source Social Network: version 8.6 only

Published 2025-11-03. Last modified 2026-06-17.