VULNERABILITY INTELLIGENCE

CVE-2025-46703

CVSS score6.4 MEDIUM

EPSS probability0.20%

CISA KEVNot currently listed

Published2025-09-19

Last modified2026-06-17

Description

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-Site Scripting (XSS). This issue affects BlueSpice: from 5 through 5.1.1.