CVE-2025-54348: Pingalert Application Server: güvenlik açığı

Açıklama (NVD)

A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information.

Özet bilgiler

Ürün

Desktopalert Pingalert Application Server

CVSS v3.1

6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

EPSS

%0,18 (yüzdelik 8)

CWE

CWE-80

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• desktopalert.net
• desktopalert.net
• CWE-80