{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/37094?format=json","vulnerability_id":"VCID-ema2-k1vh-bkfr","summary":"A vulnerability, which was classified as problematic, has been found in Huashengdun WebSSH up to 1.6.2. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument hostname/port leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","aliases":[{"alias":"CVE-2025-7885"},{"alias":"PYSEC-2025-234"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/46084?format=json","purl":"pkg:pypi/webssh@1.6.3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.6.3"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/46041?format=json","purl":"pkg:pypi/webssh@0.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46042?format=json","purl":"pkg:pypi/webssh@0.2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/46043?format=json","purl":"pkg:pypi/webssh@0.2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.2.2"},{"url":"http://public2.vulnerablecode.io/api/packages/46044?format=json","purl":"pkg:pypi/webssh@0.2.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.2.3"},{"url":"http://public2.vulnerablecode.io/api/packages/46045?format=json","purl":"pkg:pypi/webssh@0.2.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.2.5"},{"url":"http://public2.vulnerablecode.io/api/packages/46046?format=json","purl":"pkg:pypi/webssh@0.2.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.2.6"},{"url":"http://public2.vulnerablecode.io/api/packages/46047?format=json","purl":"pkg:pypi/webssh@0.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46048?format=json","purl":"pkg:pypi/webssh@0.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.3.1"},{"url":"http://public2.vulnerablecode.io/api/packages/46049?format=json","purl":"pkg:pypi/webssh@0.3.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.3.2"},{"url":"http://public2.vulnerablecode.io/api/packages/46050?format=json","purl":"pkg:pypi/webssh@0.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/46051?format=json","purl":"pkg:pypi/webssh@0.3.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.3.5"},{"url":"http://public2.vulnerablecode.io/api/packages/46052?format=json","purl":"pkg:pypi/webssh@0.3.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.3.9"},{"url":"http://public2.vulnerablecode.io/api/packages/46053?format=json","purl":"pkg:pypi/webssh@0.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46054?format=json","purl":"pkg:pypi/webssh@0.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/46055?format=json","purl":"pkg:pypi/webssh@0.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.4.6"},{"url":"http://public2.vulnerablecode.io/api/packages/46056?format=json","purl":"pkg:pypi/webssh@0.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46057?format=json","purl":"pkg:pypi/webssh@0.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46058?format=json","purl":"pkg:pypi/webssh@0.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/46059?format=json","purl":"pkg:pypi/webssh@0.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46060?format=json","purl":"pkg:pypi/webssh@0.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/46061?format=json","purl":"pkg:pypi/webssh@0.7.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.7.2"},{"url":"http://public2.vulnerablecode.io/api/packages/46062?format=json","purl":"pkg:pypi/webssh@0.7.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.7.3"},{"url":"http://public2.vulnerablecode.io/api/packages/46063?format=json","purl":"pkg:pypi/webssh@0.8.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.8.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46064?format=json","purl":"pkg:pypi/webssh@0.9.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@0.9.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46065?format=json","purl":"pkg:pypi/webssh@1.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46066?format=json","purl":"pkg:pypi/webssh@1.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/46067?format=json","purl":"pkg:pypi/webssh@1.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/46068?format=json","purl":"pkg:pypi/webssh@1.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.0.3"},{"url":"http://public2.vulnerablecode.io/api/packages/46069?format=json","purl":"pkg:pypi/webssh@1.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46070?format=json","purl":"pkg:pypi/webssh@1.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/46071?format=json","purl":"pkg:pypi/webssh@1.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46072?format=json","purl":"pkg:pypi/webssh@1.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46073?format=json","purl":"pkg:pypi/webssh@1.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46074?format=json","purl":"pkg:pypi/webssh@1.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.4.2"},{"url":"http://public2.vulnerablecode.io/api/packages/46075?format=json","purl":"pkg:pypi/webssh@1.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.4.3"},{"url":"http://public2.vulnerablecode.io/api/packages/46076?format=json","purl":"pkg:pypi/webssh@1.4.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.4.5"},{"url":"http://public2.vulnerablecode.io/api/packages/46077?format=json","purl":"pkg:pypi/webssh@1.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46078?format=json","purl":"pkg:pypi/webssh@1.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.5.1"},{"url":"http://public2.vulnerablecode.io/api/packages/46079?format=json","purl":"pkg:pypi/webssh@1.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/46080?format=json","purl":"pkg:pypi/webssh@1.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/46081?format=json","purl":"pkg:pypi/webssh@1.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/46082?format=json","purl":"pkg:pypi/webssh@1.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/46083?format=json","purl":"pkg:pypi/webssh@1.6.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ema2-k1vh-bkfr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/webssh@1.6.2"}],"references":[{"reference_url":"https://github.com/4m3rr0r/PoCVulDb/blob/main/CVE-2025-7885.md","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://github.com/4m3rr0r/PoCVulDb/blob/main/CVE-2025-7885.md"},{"reference_url":"https://github.com/huashengdun/webssh/issues/410","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://github.com/huashengdun/webssh/issues/410"},{"reference_url":"https://vuldb.com/?ctiid.317000","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://vuldb.com/?ctiid.317000"},{"reference_url":"https://vuldb.com/?id.317000","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://vuldb.com/?id.317000"},{"reference_url":"https://vuldb.com/?submit.613610","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://vuldb.com/?submit.613610"}],"weaknesses":[],"exploits":[],"severity_range_score":"6.1 - 6.1","exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ema2-k1vh-bkfr"}