CVE-2025-4760 Authenticated Stored Cross-Site Scripting (XSS) in Multiple WSO2 Products via API Document Upload in Publisher

[
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "3.2.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.0.428",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.1.48",
        "status": "affected",
        "version": "3.2.1",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1.0.209",
        "status": "affected",
        "version": "4.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.0.145",
        "status": "affected",
        "version": "4.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.0.60",
        "status": "affected",
        "version": "4.3.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.4.0.23",
        "status": "affected",
        "version": "4.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.0.7",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Control Plane",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.8",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Universal Gateway",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.7",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Traffic Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.7",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.api",
    "product": "WSO2 Carbon API Management API",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "6.7.206.559",
        "status": "affected",
        "version": "6.7.206",
        "versionType": "custom"
      },
      {
        "lessThan": "6.7.210.48",
        "status": "affected",
        "version": "6.7.210",
        "versionType": "custom"
      },
      {
        "lessThan": "9.20.74.365",
        "status": "affected",
        "version": "9.20.74",
        "versionType": "custom"
      },
      {
        "lessThan": "9.28.116.321",
        "status": "affected",
        "version": "9.28.116",
        "versionType": "custom"
      },
      {
        "lessThan": "9.29.120.163",
        "status": "affected",
        "version": "9.29.120",
        "versionType": "custom"
      },
      {
        "lessThan": "9.30.67.80",
        "status": "affected",
        "version": "9.30.67",
        "versionType": "custom"
      },
      {
        "lessThan": "9.31.86.30",
        "status": "affected",
        "version": "9.31.86",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "9.31.117",
        "versionType": "custom"
      }
    ]
  }
]