Threats tagged 'ghsa-4qqm-257h-w336'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.2%	CVE-2025-61431Reflected Cross-site Scripted (XSS) Vulnerability Medium6.1EPSS 0.2%2025-11-04GCVE DatabaseCVE-2025-61431 A reflected cross-site scripting (XSS) vulnerability exists in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity and Infinity Zucchetti v4.1 and earlier. This flaw allows attackers to execute arbitrary JavaScript in the context of a user's browser by injecting a crafted payload into the pHtmlSource parameter. A vendor fix addressing this vulnerability was released on 2025-06-18. EPSS 0.2%Report on CVE-2025-61431 Vulnerability CWE-79 #ghsa-4qqm-257h-w336	GCVE Database	2025-11-04

Page 1 of 1