CVE-2025-25189

The ZOO-Project is an open source processing platform. A reflected Cross-Site Scripting vulnerability exists in the ZOO-Project Web Processing Service WPS publish.py CGI script prior to commit 7a5ae1a. The script reflects user input from the jobid parameter in its HTTP response without proper HTM...

CVE-2025-25189

creationtimestamp| type| source ---|---|--- 2025-02-10 22:15:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113981896093771933 2025-02-10 22:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhu6ayiqzt2z 2025-02-11 00:14:21+00:00| seen|...

CVE-2025-25189 [XBOW-025-031] Reflected Cross-Site Scripting via jobid Parameter in ZOO-Project WPS publish.py CGI Script

The ZOO-Project is an open source processing platform. A reflected Cross-Site Scripting vulnerability exists in the ZOO-Project Web Processing Service WPS publish.py CGI script prior to commit 7a5ae1a. The script reflects user input from the jobid parameter in its HTTP response without proper HTM...