EUVD-2025-202320

Cross Site Scripting XSS vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to execute arbitrary code via the 1 config, 2 filename, or 3 extratext parameter to allskySettings.php. When the page is reloaded or when user visits allskySettings.php, the showMessages function in...

CVE-2025-65572

Cross Site Scripting XSS vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to execute arbitrary code via the 1 config, 2 filename, or 3 extratext parameter to allskySettings.php. When the page is reloaded or when user visits allskySettings.php, the showMessages function in...

PT-2025-50214

Name of the Vulnerable Software and Affected Versions AllskyTeam AllSky version 2024.12.06 06 Description A Cross Site Scripting XSS issue exists in AllskyTeam AllSky version 2024.12.06 06. This allows remote attackers to execute arbitrary code through the config, filename, or extratext parameter...

CVE-2025-65572

A Cross Site Scripting (XSS) vulnerability exists in AllskyTeam AllSky v2024.12.06_06 . Remote attackers can execute arbitrary code by exploiting the config , filename , or extratext parameters within the allskySettings.php file. The vulnerability occurs because the showMessages() function in sta...

CVE-2025-65572

Cross Site Scripting XSS vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to execute arbitrary code via the 1 config, 2 filename, or 3 extratext parameter to allskySettings.php. When the page is reloaded or when user visits allskySettings.php, the showMessages function in...