What is CVE-2025-50183?

CVE-2025-50183 is a medium-severity vulnerability in Openlistteam Openlist, classified under Cross-site Scripting. CVSS score: 6.5/10. Published 2025-06-19.

How severe is CVE-2025-50183?

Medium severity. CVSS v3 base score is 6.5 out of 10.

XSS in Openlistteam Openlist

CVE-2025-50183

OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature of the application, where files with a .py extension that contain JavaScript code wrapped in <script…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (41.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Openlistteam Openlist — versions < 4.0.0-rc.4

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

https://github.com/OpenListTeam/OpenList/security/advisories/GHSA-2hw3-h8qx-hqqp (x_refsource_CONFIRM)
https://github.com/OpenListTeam/OpenList-Frontend/commit/7b5ed20c608c7b9b36d1950a386678e0a89f8175 (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-50183?: CVE-2025-50183 is a medium-severity vulnerability in Openlistteam Openlist, classified under Cross-site Scripting. CVSS score: 6.5/10. Published 2025-06-19.
How severe is CVE-2025-50183?: Medium severity. CVSS v3 base score is 6.5 out of 10.