CVE-2024-25662

Oxygen XML Web Author v26.0.0 and older and Oxygen Content Fusion v6.1 and older are vulnerable to Cross-Site Scripting XSS for malicious URLs...

CVE-2024-25662

CVE-2024-25662 affects Oxygen XML Web Author (prior to v26.0.0) and Oxygen Content Fusion (prior to v6.1). The vulnerability is Cross‑Site Scripting (XSS) triggered by malicious URLs, as described in multiple sources (e.g., Oxygen advisory). The core issue is an XSS exposure in handling URLs with...