VULNERABILITY INTELLIGENCE

CVE-2025-24833

CVSS score5.4 MEDIUM

EPSS probability0.29%

CISA KEVNot currently listed

Published2025-10-16

Last modified2026-10-09

Description

Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser.