Threats tagged 'ghsa-gj82-c7f3-xr2m'

CVE-2025-63588 is a high-severity reflected cross-site scripting (XSS) vulnerability in CMSimpleXH's query handling. It allows unauthenticated remote attackers to inject and execute arbitrary JavaScript in victims' browsers via crafted requests, such as malicious POST login attempts. Exploitation can lead to theft of session cookies, credential disclosure, or other client-side impacts.