---
id: CVE-2025-14244
title: A flaw has been found in GreenCMS 2.3.0603
summary: >-
  A flaw has been found in GreenCMS 2.3.0603. Affected by this issue is some
  unknown functionality of the file /Admin/Controller/CustomController.class.php
  of the component Menu Management Page. This manipulation of the argument Link
  cause…
severity: low
cvss: 2.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N'
cwe:
  - CWE-79
  - CWE-94
  - CWE-79
vendor: njtech
product: greencms
affected:
  - greencms = 2.3.0603
published: '2025-12-08'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T19:10:00.173'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-14244'
references:
  - url: 'https://gist.github.com/b1uel0n3/83f9965b3499a2abfee30c77458f718a'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.334754'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.334754'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.702435'
    label: cna@vuldb.com
tags:
  - nvd
epss: 0.00272
epssPercentile: 0.18207
ingestedAt: '2026-10-15T19:25:46.336Z'
---

## Overview

A flaw has been found in GreenCMS 2.3.0603. Affected by this issue is some unknown functionality of the file /Admin/Controller/CustomController.class.php of the component Menu Management Page. This manipulation of the argument Link causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

## Affected

- `greencms = 2.3.0603`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.