What is CVE-2025-41355?

CVE-2025-41355 is a medium-severity vulnerability in Anon Proxy Server, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-03-31.

How severe is CVE-2025-41355?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Anon Proxy Server

CVE-2025-41355

Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. It affects 'port' and 'proxyPort' parameters in '/anon.php' endpoint.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (9.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Anon Proxy Server — versions 0.104
Anonproxyserver Anon_proxy_server — versions 0.104

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve-coordination@incibe.es (Third Party Advisory)

Frequently asked questions

What is CVE-2025-41355?: CVE-2025-41355 is a medium-severity vulnerability in Anon Proxy Server, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-03-31.
How severe is CVE-2025-41355?: Medium severity. CVSS v3 base score is 6.1 out of 10.