CVE-2025-2975: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic. This issue affects some unknown processing of the file Settings/Email/Signature/EditHtmlSource of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated...

PT-2025-13651

Name of the Vulnerable Software and Affected Versions GFI KerioConnect version 10.0.6 Description A vulnerability was found in the Signature Handler component of GFI KerioConnect, affecting the processing of the file Settings/Email/Signature/EditHtmlSource. This issue leads to cross-site scriptin...