CVE-2025-27584

creationtimestamp| type| source ---|---|--- 2025-03-03 01:29:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6120 2025-03-03 02:58:36+00:00| seen| https://t.me/cvedetector/19276 2025-03-03 04:39:18+00:00| seen|...

CVE-2025-27584

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name parameter at /rest/staffResource/update...

CVE-2025-27584

CVE-2025-27584 describes a stored XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118. The issue arises when an attacker injects a crafted payload into the First Name/Print Name/User ID parameters handled by the endpoint at /rest/staffResource...