Vulnerability Report: GO-2025-3585
- CVE-2025-30223, GHSA-2j42-h78h-q4fg
- Affects: github.com/beego/beego, github.com/beego/beego/v2
- Published: Apr 01, 2025
Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Input in github.com/beego/beego
For detailed information about this vulnerability, visit https://github.com/beego/beego/security/advisories/GHSA-2j42-h78h-q4fg.
Affected Packages
-
PathVersionsSymbols
-
before v2.3.6all symbols
Aliases
References
- https://github.com/beego/beego/security/advisories/GHSA-2j42-h78h-q4fg
- https://github.com/beego/beego/commit/939bb18c66406466715ddadd25dd9ffa6f169e25
- https://vuln.go.dev/ID/GO-2025-3585.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.