CVE-2025-56313

creationtimestamp| type| source ---|---|--- 2025-10-30 20:00:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gqtljzzt26...

CVE-2025-56313

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the /publix/run endpoint of JATOS 3.7.1 through 3.9.6 inclusive. This allows remote attackers to execute arbitrary JavaScript in a user's web browser by including a malicious payload in the "code" URL parameter. When an...