Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/12/10 12:28 a.m.•25 views

CVE-2025-65300

A stored Cross-Site Scripting XSS vulnerability exists in the Coohom SaaS Platform feVersion=1760060603897 2025-10-28 in the Account Settings module, where unsanitized user input in Address fields City, State, Country/Region is rendered back to the page. Attackers can inject arbitrary JavaScript...

5.4CVSS5.9AI score0.00199EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/09 9:31 p.m.•18 views

EUVD-2025-202319

A stored Cross-Site Scripting XSS vulnerability exists in the Coohom SaaS Platform feVersion=1760060603897 2025-10-28 in the Account Settings module, where unsanitized user input in Address fields City, State, Country/Region is rendered back to the page. Attackers can inject arbitrary JavaScript...

5.4AI score0.00199EPSS
SaveExploits1References3
OSV
OSV
•added 2025/12/09 7:15 p.m.•15 views

CVE-2025-65300

A stored Cross-Site Scripting XSS vulnerability exists in the Coohom SaaS Platform feVersion=1760060603897 2025-10-28 in the Account Settings module, where unsanitized user input in Address fields City, State, Country/Region is rendered back to the page. Attackers can inject arbitrary JavaScript...

5.4CVSS6AI score0.00199EPSS
SaveExploits1References2
NVD
NVD
•added 2025/12/09 7:15 p.m.•15 views

CVE-2025-65300

A stored Cross-Site Scripting XSS vulnerability exists in the Coohom SaaS Platform feVersion=1760060603897 2025-10-28 in the Account Settings module, where unsanitized user input in Address fields City, State, Country/Region is rendered back to the page. Attackers can inject arbitrary JavaScript...

5.4CVSS0.00199EPSS
SaveExploits1References2
CVE
CVE
•added 2025/12/09 12:00 a.m.•38 views

CVE-2025-65300

The Coohom SaaS Platform (affected build feVersion=1760060603897 ) contains a stored Cross-Site Scripting (XSS) vulnerability in the Account Settings module. The root cause is the lack of proper sanitization or context-aware output encoding for user-supplied input in the Address fields (City, Sta...

5.4CVSS5.5AI score0.00199EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/09 12:00 a.m.•6 views

CVE-2025-65300

A stored Cross-Site Scripting XSS vulnerability exists in the Coohom SaaS Platform feVersion=1760060603897 2025-10-28 in the Account Settings module, where unsanitized user input in Address fields City, State, Country/Region is rendered back to the page. Attackers can inject arbitrary JavaScript...

5.5AI score0.00199EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•21 views

PT-2025-50213

Name of the Vulnerable Software and Affected Versions Coohom SaaS Platform version 1760060603897 2025-10-28 Description A stored Cross-Site Scripting XSS issue exists in the Account Settings module. The issue occurs because unsanitized user input in Address fields, specifically City, State, and...

5.4CVSS6.3AI score0.00199EPSS
SaveExploits1References4
Rows per page
Query Builder