VULNERABILITY INTELLIGENCE

CVE-2025-13873

CVSS score5.4 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-12-02
Last modified2026-09-03
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject arbitrary JavaScript code, which executes in the browsing context of any visitor accessing the compromised survey.

Weakness classification

  • 64c5ae8f-7972-4697-86a0-7ada793ac795: CWE-79

Primary references