{"id":74619,"date":"2025-09-13T00:58:40","date_gmt":"2025-09-13T00:58:40","guid":{"rendered":""},"modified":"2025-11-02T11:12:42","modified_gmt":"2025-11-02T17:12:42","slug":"cve-2025-52161-critical-cross-site-scripting-vulnerability-in-scholl-communications-ag-weblication-cms-core","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-52161-critical-cross-site-scripting-vulnerability-in-scholl-communications-ag-weblication-cms-core\/","title":{"rendered":"CVE-2025-52161: Critical Cross-Site Scripting Vulnerability in Scholl Communications AG Weblication CMS Core<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

In this post, we will delve into the details of a critical vulnerability, CVE-2025-52161, that has been identified in Scholl Communications AG Weblication CMS Core version v019.004.000.000. This vulnerability, an instance of cross-site scripting (XSS), can potentially compromise entire systems or lead to significant data leakage.
\nThe severity of this vulnerability<\/a> not only lies in its high CVSS score but also in the ubiquity of the affected product. Scholl’s Weblication CMS Core is utilized by numerous businesses around the globe, making it a prime target for potential attackers. Therefore, understanding this vulnerability and implementing necessary mitigation strategies as soon as possible<\/a> is critical.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-52161
\nSeverity: Critical (CVSS 9.8)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n