VULNERABILITY INTELLIGENCE

CVE-2025-59905

CVSS score6.1 MEDIUM

EPSS probability0.16%

CISA KEVNot currently listed

Published2026-02-16

Last modified2026-06-17

Description

Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’. This flaw allows the injection of arbitrary client-side scripts, which are immediately reflected in the HTTP response and executed in the victim's browser.