CVE-2025-13056 A user with elevated privileges can inject XSS in the Administration ACL Menus configuration page

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Centreon Infra Monitoring Administration ACL menu configuration modules allows Stored XSS to users with high privileges. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, fro...

CVE-2025-13056

Summary: CVE-2025-13056 is a stored XSS vulnerability in Centreon Infra Monitoring, specifically in the Administration ACL menu configuration modules . The issue arises from ** Improper Neutralization of Input During Web Page Generation**, allowing stored scripts to execute in the context of user...