Cross Site Scripting in nuz007 smsboom by nuz007

CVE-2025-10946

What is CVE-2025-10946?

A Cross Site Scripting vulnerability has been identified in the nuz007 smsboom application, particularly affecting an unspecified function within the dy.php file. This vulnerability arises when an attacker manipulates the 'hm' argument, enabling potential remote exploitation. Due to the application's rolling release model, specific version identifiers for the affected builds are not disclosed, posing a risk for users of any version leading up to commit 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674.

References