CVE-2025-57538

A stored cross-site scripting XSS vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Environment PVE 8.4 allows an authenticated user to inject malicious input. The input is stored and executed in the context of other users' browsers when they view...

CVE-2025-57538

Proxmox Virtual Environment (PVE ) version 8.4 is susceptible to a stored cross-site scripting (XSS) vulnerability within the HTTP Proxy field of the Datacenter configuration panel . An authenticated user can inject malicious input that is stored and subsequently executed in the browsers of other...