CVE-2025-0827

creationtimestamp| type| source ---|---|--- 2025-03-17 15:48:59+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114178558444517317 2025-03-17 17:01:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lklmz3zhn22e...

CVE-2025-0827

A stored Cross-site Scripting XSS vulnerability affecting 3DPlay in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0827

CVE-2025-0827 describes a stored XSS in Dassault Systèmes 3DSwymer’s 3DPlay component, affecting 3DEXPERIENCE R2022x–R2024x. The vulnerability allows an attacker to execute arbitrary script in a user’s browser session. Root cause is stored XSS in 3DSwymer/3DPlay, with CVSSv3.1 base score 8.7 (HIG...