Threats Tagged 'cve-2025-65923'
View all threats tagged with 'cve-2025-65923'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-65923'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-65923 is a stored Cross-Site Scripting (XSS) vulnerability in ERPNext's CSV import feature when using the 'Update Existing Records' option. An attacker can inject malicious JavaScript into CSV fields, which is then stored and executed in the web interface when a user views the affected record. This can lead to session hijacking or unauthorized actions under the victim's account context. The vulnerability requires low privileges but does require user interaction to trigger. It has a CVSS score of 5.4 (medium severity). No known exploits are reported in the wild yet. Organizations using ERPNext should be cautious when importing CSV data and apply appropriate input validation and sanitization controls. This vulnerability primarily impacts confidentiality and integrity but not availability. Join the discussion | CVE Database V5 | 02/03/2026, 00:00:00 UTC Added: 02/04/2026, 08:01:23 UTC |
Showing 1 to 1 of 1 result