VULNERABILITY INTELLIGENCE
CVE-2025-3894
EPSS probability0.45%
CISA KEVNot currently listed
Published2025-05-23
Last modified2026-06-17
Description
Text editor embedded into MegaBIP software does not neutralize user input allowing Stored XSS attacks on other users. In order to use the editor high privileges are required. Version 5.20 of MegaBIP fixes this issue.
Weakness classification
- cvd@cert.pl: CWE-79