docuForm FSM Server Cross-site Scripting Vulnerability

The docuForm FSM Server is a server-side system developed by the German company docuForm, designed for enterprise document processing and form workflow management. Version 11.11c of the docuForm FSM Server contains a cross-site scripting vulnerability. This vulnerability originates from the...

CVE-2025-61314

A reflected cross-site scripted XSS vulnerability in the dfm-menuorderopt.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61314

The docuForm FSM Server (version 11.11c ) by GmbH Mecury Managed Print Services contains a reflected cross-site scripted (XSS) vulnerability in the dfm-menu_orderopt.php component. The root cause is the improper neutralization of input, where an unfiltered variable value allows an attacker to inj...

CVE-2025-65418

docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url...

CVE-2025-61307

A reflected cross-site scripted XSS vulnerability in the acc-menupapers.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

PT-2026-39611

Name of the Vulnerable Software and Affected Versions docuForm version 11.11c Description A reflected cross-site scripting XSS issue exists in the 'dfm-menu orderopt.php' component. This allows attackers to execute arbitrary JavaScript in a user's browser by injecting a crafted payload into an...

CVE-2025-61313

The docuForm FSM Server (version v11.11c ), a server-side system for enterprise document processing and workflow management developed by GmbH Mecury Managed Print Services , is vulnerable to a reflected cross-site scripted (XSS) vulnerability. This flaw exists in the dfm-menu_markeralerts.php com...

PT-2026-39602

A reflected cross-site scripted XSS vulnerability in the dfm-menu firmware.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

docuForm FSM Server Cross-site Scripting Vulnerability

The docuForm FSM Server is a server-side system developed by the German company docuForm, designed for enterprise document processing and form workflow management. The version 11.11c of the docuForm FSM Server contains a cross-site scripting vulnerability. This vulnerability originates from the...

docuForm FSM Server Cross-site Scripting Vulnerability

The docuForm FSM Server is a server-side system developed by the German company docuForm, designed for enterprise document processing and form workflow management. The version 11.11c of the docuForm FSM Server contains a cross-site scripting vulnerability. This vulnerability originates from the...

docuForm FSM Server security vulnerability

The docuForm FSM Server is a server-side system developed by the German company docuForm, designed for enterprise document processing and form workflow management. The docuForm FSM Server version 11.11c contains a security vulnerability, which stems from directory traversal attacks. This...

PT-2026-39603

A reflected cross-site scripted XSS vulnerability in the dfm-menu coveragealerts.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable val...

CVE-2025-61306

A reflected cross-site scripted XSS vulnerability in the dfm-menucoveragealerts.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable valu...

CVE-2025-65415: Session Fixation

docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application...

CVE-2025-65417

docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application...

PT-2026-39615

Name of the Vulnerable Software and Affected Versions docuFORM Managed Print Service Client version 11.11c Description A directory traversal flaw allows attackers to read arbitrary files by using a crafted URL. Recommendations At the moment, there is no information about a newer version that...

CVE-2025-65415

docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application...

CVE-2025-65418

The docuFORM Managed Print Service Client version 11.11c is vulnerable to a directory traversal flaw. This vulnerability allows an attacker to read arbitrary files by providing a crafted URL . While the vulnerability has been observed in the wild (sighting reported in May 2026), no specific explo...

PT-2026-39614

docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application...

PT-2026-39607

A reflected cross-site scripted XSS vulnerability in the acc-menu billings.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...