Lucene search
+L

2 matches found

NVD
NVD
added 2025/10/17 7:15 p.m.11 views

CVE-2025-56320

CobbleStone Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting XSS in its chat box component. This allows a remote attacker to execute arbitrary code. NOTE: the Supplier reports that this is "Present only in an obsolete, unsupported version no longer in...

5.4CVSS0.00324EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/10/17 12:0 a.m.3 views

CVE-2025-56320

Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting XSS in its chat box component. This allows a remote attacker to execute arbitrary code. NOTE: the Supplier reports that this is "Present only in an obsolete, unsupported version no longer in circulation."...

5.4CVSS6.2AI score0.00324EPSS
SaveExploits0References4
Rows per page
Query Builder