CVE-2025-57310

High · 8.8

CVSS

8.8

EPSS

0.3%

Published

Nov 12, 2025

CISA due date

—

The record

A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code.

Affected packages

Ecosystem	Package	Introduced	Fixed