CVE-2025-7618

Medium

Description

A stored Cross-Site Scripting (XSS) vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser and used with the affected applications. Affected products and versions include: from ADM 4.1.0 to ADM 4.3.3.RH61 as well as ADM 5.0.0.RIN1 and earlier, and Text Editor 1.0.0.r112 and earlier.

SeverityMedium

CVSS4.8

Exploit probability—

ProductADM

PublishedJul 14, 2025

First seenJul 14, 2025

Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Vendor advisories

asustor.com/security/security_advisory_detail?id=45

Affected products

Product	Affected versions	Fixed in
ASUSTOR ADM	4.1.0 ≤ v ≤ 4.3.3.RH61, 5.0.0 ≤ v ≤ 5.0.0.RIN1, 1.0.0 ≤ v ≤ 1.0.0.r112	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.