Medium 6.1Published Oct 1, 2025

CVE-2025-61583TS3 Manager is modern web interface for maintaining Teamspeak3 servers.

Updated under an hour ago (2026-10-19 06:10 UTC)

Does this affect you?

It affects joni1802 ts3_manager. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for joni1802 ts3_manager

Exploited in the last 30 days

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A reflected cross-site scripting vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability exists in the error handling mechanism of the login page, where malicious scripts embedded in server hostnames are executed in the victim's browser context without proper sanitization. This issue is fixed in version 2.2.2.

CVSS: 6.1 MEDIUM (v3.1, NVD)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness (CWE): CWE-20, CWE-80
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Analyzed
Record last updated: Oct 12, 2026
First seen by InfoSec Signals: Oct 12, 2026

Affected products

Affected products

joni1802 ts3_manager joni1802:ts3_manager	before 2.2.2	NVD

References

https://github.com/joni1802/ts3-manager/commit/3a069915f97a6f5dae1fe0b2e32aa11a69d83b5epatch
https://github.com/joni1802/ts3-manager/security/advisories/GHSA-qw6j-37r6-m93gexploit, third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.