CVE-2025-54760

A primary security issue is a Stored cross-site scripting (XSS) vulnerability in desknet’s NEO, affecting v9.0R2.0 and earlier, which could allow arbitrary JavaScript to run in a user’s browser. The CVE is corroborated by multiple sources (NVD/Red Hat/JVN/CVE records) noting the same description....

CVE-2025-54760

Stored cross-site scripting XSS vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser...

EUVD-2025-34748

Stored cross-site scripting XSS vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser...

CVE-2025-54760

Stored cross-site scripting XSS vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser...

CVE-2025-52583

The CVE-2025-52583 entry describes a Reflected cross-site scripting (XSS) vulnerability in desknet’s Web Server that allows execution of arbitrary JavaScript in a user’s browser. The connected sources confirm the issue is tied to desknet’s Web Server and identify the impact as client-side script ...

CVE-2025-52583

Reflected cross-site scripting XSS vulnerability in desknet's Web Server allows execution of arbitrary JavaScript in a user’s web browser...

CVE-2025-24833

Stored cross-site scripting XSS vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser...

PT-2025-42456

Name of the Vulnerable Software and Affected Versions desknet versions 2.0R1.0 through 9.0R2.0 Description A stored cross-site scripting issue exists in desknet’s NEO. This allows the execution of arbitrary JavaScript in a user’s web browser. Recommendations Update desknet to a version later than...

PT-2025-42454

Name of the Vulnerable Software and Affected Versions desknet NEO versions 9.0R2.0 and earlier Description A stored cross-site scripting issue exists in desknet NEO. This allows the execution of arbitrary JavaScript code within a user's web browser. The issue affects versions up to and including...

Desknets Neo 跨站脚本漏洞

Desknets Neo is a remote office support software from Desknets Japan. A cross-site scripting vulnerability exists in Desknets Neo V9.0R2.0 and earlier versions, which originates from stored cross-site scripting and could lead to the execution of arbitrary JavaScript...

PT-2025-42453

Name of the Vulnerable Software and Affected Versions desknet's Web Server affected versions not specified Description A reflected cross-site scripting XSS issue exists in desknet's Web Server. This allows the execution of arbitrary JavaScript code within a user's web browser. The issue involves...

PT-2025-42452

Name of the Vulnerable Software and Affected Versions desknet NEO versions V4.0R1.0 through V9.0R2.0 Description A stored cross-site scripting XSS issue exists in desknet NEO. This allows the execution of arbitrary JavaScript code within a user's web browser. The issue involves the ability to...

CVE-2025-54760: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting XSS vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser...

CVE-2025-24833: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting XSS vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser...

CVE-2025-54859: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting XSS vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser...

CVE-2025-52583: Improper Neutralization of Input During Web Page Generation

Reflected cross-site scripting XSS vulnerability in desknet's Web Server allows execution of arbitrary JavaScript in a user’s web browser...

PT-2025-42371

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM affected versions not specified Description A reflected cross-site scripting XSS issue exists on an unspecified page within BIG-IP APM. This allows an attacker to execute JavaScript code within the security context of a user who ...

CVE-2025-11183

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...

Cross-site Scripting (XSS)

Overview qwc2 is a QGIS Web Client Affected versions of this package are vulnerable to Cross-site Scripting XSS via multiple components, including ServiceInfoWindow, SearchBox, LayerInfoWindow, and others. An attacker can execute arbitrary JavaScript code in the context of the user's browser by...

CVE-2025-11184

CVE-2025-11184 affects QGIS QWC2 Registration GUI up to version 2025.03.31. It enables an authorized attacker to inject arbitrary JavaScript (XSS) into the page, with potential impact to Confidentiality (High) and Integrity (Low) per CVSS. Remediation: upgrade to a version later than 2025.03.31 (...