What is CVE-2025-23362?

CVE-2025-23362 is a medium-severity vulnerability in Rodrigue Exif Viewer Classic, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-01-29.

How severe is CVE-2025-23362?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Rodrigue Exif Viewer Classic

CVE-2025-23362

The old versions of EXIF Viewer Classic contain a cross-site scripting vulnerability caused by improper handling of EXIF meta data. When an image is rendered and crafted EXIF meta data is processed, an arbitrary script may be executed on the web browser. Versions 2.3.2 and 2.4.0 were reported as vulnerable. According to the vendor, the product has been refactored after those old versions and the version 3.0.1 is not vulnerable.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (27.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Rodrigue Exif Viewer Classic — versions 2.4.0 and prior

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

Frequently asked questions

What is CVE-2025-23362?: CVE-2025-23362 is a medium-severity vulnerability in Rodrigue Exif Viewer Classic, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-01-29.
How severe is CVE-2025-23362?: Medium severity. CVSS v3 base score is 6.1 out of 10.