CVE-2025-44024

Cross-Site Scripting XSS vulnerability was discovered in the Pichome system v2.1.0 and before. The vulnerability exists due to insufficient sanitization of user input in the login form. An attacker can inject malicious JavaScript code into the username or password fields during the login process...

CVE-2025-44024

A Cross-Site Scripting (XSS) vulnerability exists in the Pichome open-source web hosting program, specifically in versions v2.1.0 and prior . The root cause is insufficient sanitization of user input within the login form. This allows an attacker to inject malicious JavaScript code into the usern...