Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
added 2025/05/14 11:26 p.m.12 views

CVE-2025-46825

Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a Stored Cross-Site Scripting XSS Vulnerability in the name parameter of the http://localhost/?controller=ProjectCreationController=create form. This vulnerability allows attackers ...

5.4CVSS6AI score0.00296EPSS
Exploits1References1
NVD
NVD
added 2025/05/12 11:15 p.m.34 views

CVE-2025-46825

Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a Stored Cross-Site Scripting XSS Vulnerability in the name parameter of the http://localhost/?controller=ProjectCreationController&action=create form. This vulnerability allows...

5.4CVSS0.00296EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/05/12 10:53 p.m.5 views

CVE-2025-46825 Kanboard has stored Cross-site Scripting vulnerability in project name

Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a Stored Cross-Site Scripting XSS Vulnerability in the name parameter of the http://localhost/?controller=ProjectCreationController&action=create form. This vulnerability allows...

2.3CVSS5.7AI score0.00296EPSS
Exploits1References4
CVE
CVE
added 2025/05/12 10:53 p.m.56 views

CVE-2025-46825

Kanboard (versions 1.2.26–1.2.44) has a Stored XSS vulnerability in the name field of the create form (controller=ProjectCreationController&action=create). The issue arises despite a default CSP that blocks the attack and may be exploitable if CSP is misconfigured and CSS injection is possible. V...

5.4CVSS5.7AI score0.00296EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2025/05/12 10:53 p.m.14 views

CVE-2025-46825 Kanboard has stored Cross-site Scripting vulnerability in project name

Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a Stored Cross-Site Scripting XSS Vulnerability in the name parameter of the http://localhost/?controller=ProjectCreationController&action=create form. This vulnerability allows...

2.3CVSS5.8AI score0.00296EPSS
Exploits1References6
Rows per page
Query Builder