VULNERABILITY INTELLIGENCE

CVE-2025-65465

CVSS score6.1 MEDIUM

EPSS probability0.46%

CISA KEVNot currently listed

Published2026-03-02

Last modified2026-06-17

Description

A reflected Cross-Site Scripting (XSS) vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary web script or HTML via a crafted payload in a filename parameter (e.g., to the FileRead function). This occurs because the error mes…