# CVEs published 2025-09-13

15 CVEs were published on September 13, 2025: 0 critical, 0 high. Days are UTC.

- [CVE-2025-10384](https://cve.now/CVE-2025-10384.md): yangzongzhuan RuoYi Role cancelAll improper authorization (CVSS 5.3, yangzongzhuan RuoYi)
- [CVE-2025-10374](https://cve.now/CVE-2025-10374.md): Shenzhen Sixun Business Management System OperatorStop improper authorization (CVSS 6.9, Shenzhen Sixun Business Management System)
- [CVE-2025-10373](https://cve.now/CVE-2025-10373.md): Portabilis i-Educar educar\_turma\_tipo\_cad.php cross site scripting (CVSS 5.1, Portabilis i-Educar)
- [CVE-2025-10372](https://cve.now/CVE-2025-10372.md): Portabilis i-Educar educar\_modulo\_cad.php cross site scripting (CVSS 5.1, Portabilis i-Educar)
- [CVE-2025-10371](https://cve.now/CVE-2025-10371.md): eCharge Hardy Barth Salia PLCC api.php unrestricted upload (CVSS 6.9, eCharge Hardy Barth Salia PLCC)
- [CVE-2025-10370](https://cve.now/CVE-2025-10370.md): MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting (CVSS 5.1, MiczFlor RPi-Jukebox-RFID)
- [CVE-2025-10369](https://cve.now/CVE-2025-10369.md): MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross site scripting (CVSS 5.1, MiczFlor RPi-Jukebox-RFID)
- [CVE-2025-10368](https://cve.now/CVE-2025-10368.md): MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross site scripting (CVSS 5.1, MiczFlor RPi-Jukebox-RFID)
- [CVE-2025-10367](https://cve.now/CVE-2025-10367.md): MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scripting (CVSS 5.1, MiczFlor RPi-Jukebox-RFID)
- [CVE-2025-10366](https://cve.now/CVE-2025-10366.md): MiczFlor RPi-Jukebox-RFID inc.setWlanIpMail.php cross site scripting (CVSS 5.1, MiczFlor RPi-Jukebox-RFID)
- [CVE-2025-10359](https://cve.now/CVE-2025-10359.md): Wavlink WL-WN578W2 wireless.cgi sub\_404DBC os command injection (CVSS 6.9, Wavlink WL-WN578W2)
- [CVE-2025-10358](https://cve.now/CVE-2025-10358.md): Wavlink WL-WN578W2 wireless.cgi sub\_404850 os command injection (CVSS 6.9, Wavlink WL-WN578W2)
- [CVE-2025-10340](https://cve.now/CVE-2025-10340.md): WhatCD Gazelle Commit Message change\_log.php cross site scripting (CVSS 5.1, WhatCD Gazelle)
- [CVE-2025-10332](https://cve.now/CVE-2025-10332.md): cdevroe unmark info.php cross site scripting (CVSS 5.1, cdevroe unmark)
- [CVE-2025-10331](https://cve.now/CVE-2025-10331.md): cdevroe unmark Marks.php cross site scripting (CVSS 5.1, cdevroe unmark)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-09-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.