CVE-2025-65417 identifies a reflected cross-site scripting vulnerability in the login page of docuFORM Managed Print Service Client version 11.11c. This vulnerability allows attackers to inject malicious scripts that are reflected in the application's response, potentially enabling client-side code execution in the context of the affected application. No CVSS score or vendor remediation information is currently available, and no exploits have been reported in the wild.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the user's browser session when interacting with the login page. This may lead to theft of session tokens, user credentials, or other sensitive information accessible via the browser. However, no evidence of active exploitation or broader impact has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with the login page and consider implementing web application firewall (WAF) rules to detect and block reflected XSS payloads targeting this endpoint.