CVE-2025-61583
Medium
Description
TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A reflected cross-site scripting vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability exists in the error handling mechanism of the login page, where malicious scripts embedded in server hostnames are executed in the victim's browser context without proper sanitization. This issue is fixed in version 2.2.2.
SeverityMedium
CVSS4.3
Exploit probability—
ProductJoni1802 Ts3 Manager
PublishedOct 1, 2025
First seenOct 1, 2025
Weakness typeCWE-20Improper input validationCWE-80CWE-80
How to fix
Update
- joni1802 ts3_manager2.2.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joni1802 ts3_manager | v < 2.2.2 | 2.2.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.