Executive brief
Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Input in github.com/beego/beego
Affected products
- Go github.com/beego/beego
- Go github.com/beego/beego/v2
Junglewise Threat Intelligence
CVE-2025-30223: GO-2025-3585 - Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Input in github.com/beego/beego
CVE-2025-30223 · Severity: low · CVSS 3.1 · Published 2025-04-01
Technologies: github.com/beego/beego (Go), github.com/beego/beego/v2 (Go). Vendors: Go.
Related threats
- GO-2024-3331 - Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego
- GO-2024-3016 - Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2
- Beego privilege escalation vulnerability
- GO-2022-0569 - Path traversal in github.com/beego/beego and beego/v2
- GO-2022-0572 - Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2