CVE-2025-65300: n/a
Source CVE Database V5
Not known to be exploited · CVSS 5.4 Medium.
Data as of 26 Oct 2026, 06:26 UTC
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitation evidence
Disclosed: evidence found.
CVE published 9 Dec 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.
What to do
AI-suggested
European organizations should implement the following specific mitigations: 1) Immediately audit and sanitize all user input fields in the Coohom platform, especially address-related fields, to ensure proper encoding and filtering of special characters. 2) Employ Content Security Policy (CSP) headers to restrict execution of unauthorized scripts in browsers accessing the platform. 3) Enforce strict access controls and limit privileges to reduce the risk of malicious input from low-privilege users. 4) Educate users about the risks of clicking on suspicious links or viewing untrusted profiles to reduce user interaction exploitation. 5) Monitor logs and user activity for unusual profile updates or script injection attempts. 6) Engage with Coohom support or vendor channels to request timely patches or updates addressing this vulnerability. 7) Consider implementing web application firewalls (WAF) with rules to detect and block XSS payloads targeting the platform. 8) Regularly review and update incident response plans to include scenarios involving client-side script attacks. These measures go beyond generic advice by focusing on platform-specific input vectors and user behavior.
Description
A stored Cross-Site Scripting (XSS) vulnerability exists in the Coohom SaaS Platform feVersion=1760060603897 (2025-10-28) in the Account Settings module, where unsanitized user input in Address fields (City, State, Country/Region) is rendered back to the page. Attackers can inject arbitrary JavaScript code, which executes when the affected profile page is viewed. This can lead to session hijacking, cookie theft, or arbitrary script execution in the victim's browser.