CVE-2025-0878 is a Cross-Site Scripting (XSS) vulnerability in Akinsoft LimonDesk affecting versions from s1.02.14 before v1.02.17. The issue arises from improper neutralization of input during web page generation, classified under CWE-79. The vulnerability requires network access with low attack complexity but demands high privileges and does not require user interaction. The impact includes limited confidentiality, integrity, and availability loss. No patch or official remediation information is currently available.

The vulnerability allows an attacker with high privileges to execute malicious scripts in the context of the affected application, potentially leading to limited disclosure of information, modification of data, or disruption of service. The overall impact is rated medium with a CVSS score of 4.7. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected versions and monitor for unusual activity. Avoid exposing the vulnerable application to untrusted users. Follow vendor communications for updates on patches or mitigations.