CVE-2025-66939

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

5.4 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N                                    

Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execute arbitrary code via a crafted favicon file

Published Date

January 12, 2026

Last Modified

January 22, 2026

CWE ID

CWE-79

Source

NVD

Vendor

altumcode

Product

66biolinks