CVE-2025-15175 - SohuTV CacheCloud AppController.java appCommandAnalysis cross site scripting

CVE-2025-15175 - SohuTV CacheCloud AppController.java appCommandAnalysis cross site scripting

CVE ID : CVE-2025-15175 Published : Dec. 29, 2025, 6:15 a.m. | 1 hour, 41 minutes ago Description : A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/main/java/com/sohu/cache/web/controller/AppController.java. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
Dec. 29, 2025
Affected Product: java

Source: Telegram CVE Monitor