PT-2025-11281

Name of the Vulnerable Software and Affected Versions: Aperio Eslide Manager Application affected versions not specified Description: The issue concerns reflected cross-site scripting XSS within the Leica Web Viewer component of the Aperio Eslide Manager Application. An authenticated user can...

CVE-2025-1888: Improper Neutralization of Input During Web Page Generation

The Leica Web Viewer within the Aperio Eslide Manager Application is vulnerable to reflected cross-site scripting XSS. An authenticated user can access the slides within a project and injecting malicious JavaScript into the "memo" field. The memo field has a hover over action that will display a...