Логотип exploitDog
bind:CVE-2025-65187
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-65187

Количество 4

Количество 4

ubuntu логотип

CVE-2025-65187

2 месяца назад

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2025-65187

2 месяца назад

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2025-65187

2 месяца назад

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-cf64-8857-h96q

2 месяца назад

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
0%
Низкий
2 месяца назад
nvd логотип
CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
0%
Низкий
2 месяца назад
debian логотип
CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v ...

CVSS3: 6.1
0%
Низкий
2 месяца назад
github логотип
GHSA-cf64-8857-h96q

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
0%
Низкий
2 месяца назад

Уязвимостей на страницу