Lucene search
+L

3 matches found

OSV
OSV
•added 2025/11/30 3:30 a.m.•17 views

GHSA-6QJ9-2G9M-29X9 Tryton sao allows XSS because it does not escape completion values

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS6.2AI score0.00168EPSS
SaveExploits0References4
CVE
CVE
•added 2025/11/30 12:00 a.m.•35 views

CVE-2025-66421

CVE-2025-66421 affects Tryton sao (tryton-sao) prior to 7.6.11, with an XSS vulnerability due to unescaped completion values. Affected versions are before 7.6.11, with fixes in 7.6.11, 7.4.21, 7.0.40, and 6.0.69. Impact is cross-site scripting; exploitation details are not provided in the cited d...

5.4CVSS5.9AI score0.00168EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/30 12:00 a.m.•1 views

CVE-2025-66421: Improper Neutralization of Input During Web Page Generation

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS5.8AI score0.00168EPSS
SaveExploits0References1
Rows per page
Query Builder