VULNERABILITY INTELLIGENCE

CVE-2025-7746

EPSS probability0.43%
CISA KEVNot currently listed
Published2025-09-09
Last modified2026-06-17

Description

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser.

Weakness classification

  • cybersecurity@se.com: CWE-79

Primary references