Reflected Cross-Site Scripting Vulnerability in TS3 Manager for Teamspeak3 Servers

CVE-2025-61583

What is CVE-2025-61583?

A reflected cross-site scripting vulnerability has been found in TS3 Manager, a web interface designed for maintaining Teamspeak3 servers. This issue affects versions 2.2.1 and prior, specifically tied to the error handling mechanism on the login page. Attackers can exploit this vulnerability by embedding malicious scripts in server hostnames, which are executed in the browser context of unsuspecting users without appropriate sanitization. Users are urged to upgrade to version 2.2.2, where this vulnerability has been addressed. For detailed information, refer to the advisory and commits related to this issue.

References