CVE-2025-59904
Vulnerability Description
Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint. This issue allows malicious scripts to be injected and executed persistently in the context of users accessing the affected resource.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-79
Source
NVD
Vendor
Kubysoft
Product
Kubysoft
Discussion (0)
Add Comment
No comments yet. Be the first!