CVE-2025-48051

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p36

Published

May 15, 2025 (May 15, 2025)

Modified

Jun 17, 2026

Description

powertip.ts in Lila (for Lichess) before ab0beaf allows XSS in some applications because of an innerHTML usage pattern in which text is extracted from a DOM node and interpreted as HTML.

Vendors: lichess
Products: powertip.ts
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.