CVE-2025-1987

🗓️ 21 Jun 2025 21:35:06Reported by BitdefenderType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 96 Views

Stored XSS vulnerability in Psono-Client allows JavaScript execution via malicious vault entries.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-1987	21 Jun 202521:47	–	circl
CNNVD	PSONO Client 跨站脚本漏洞	21 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-1987 Stored XSS in Psono-Client via Malicious Vault Entry URLs	21 Jun 202521:35	–	cvelist
EUVD	EUVD-2025-18823	3 Oct 202520:07	–	euvd
NVD	CVE-2025-1987	21 Jun 202522:15	–	nvd
Positive Technologies	PT-2025-26523 · Unknown · Psono-Client	21 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-1987	7 Jan 202609:11	–	redhatcve
Vulnrichment	CVE-2025-1987 Stored XSS in Psono-Client via Malicious Vault Entry URLs	21 Jun 202521:35	–	vulnrichment

NVD

Node

esaqa psono_clientRange≤4.0.4--

Node

bitdefender securepassRange<0.0.76web_client-

bitdefender securepassRange<1.0.10safari-

bitdefender securepassRange<1.1.8chrome-

bitdefender securepassRange<1.1.18edge-

bitdefender securepassRange<1.1.22firefox-

[
  {
    "defaultStatus": "unaffected",
    "product": "Psono-client",
    "vendor": "Psono",
    "versions": [
      {
        "lessThanOrEqual": "4.0.4",
        "status": "affected",
        "version": "0",
        "versionType": "git"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "SecurePass",
    "vendor": "Bitdefender",
    "versions": [
      {
        "lessThan": "0.0.76",
        "status": "affected",
        "version": "0",
        "versionType": "Web client"
      },
      {
        "lessThan": "1.1.18",
        "status": "affected",
        "version": "0",
        "versionType": "Chrome"
      },
      {
        "lessThan": "1.1.22",
        "status": "affected",
        "version": "0",
        "versionType": "Firefox"
      },
      {
        "lessThan": "1.1.18",
        "status": "affected",
        "version": "0",
        "versionType": "Edge"
      },
      {
        "lessThan": "1.0.10",
        "status": "affected",
        "version": "0",
        "versionType": "Safari"
      }
    ]
  }
]