What is CVE-2025-22142?

CVE-2025-22142 is a medium-severity vulnerability in Namelessmc Nameless, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2025-01-13.

How severe is CVE-2025-22142?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Namelessmc Nameless

CVE-2025-22142

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In affected versions an admin can add the ability to have users fill out an additional field and users can inject javascript code into it that would be ac…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (19.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Namelessmc Nameless — versions <= 2.1.2

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security-advisories@github.com (x_refsource_CONFIRM, Exploit, Vendor Advisory)
security-advisories@github.com (x_refsource_MISC, Release Notes)

Frequently asked questions

What is CVE-2025-22142?: CVE-2025-22142 is a medium-severity vulnerability in Namelessmc Nameless, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2025-01-13.
How severe is CVE-2025-22142?: Medium severity. CVSS v3 base score is 5.4 out of 10.