CVE-2025-61306

A reflected cross-site scripted (XSS) vulnerability exists in the dfm-menu_coveragealerts.php component of GmbH Mecury Managed Print Services (docuForm) version v11.11c . The root cause is the failure to properly filter variable values, which allows an attacker to inject a crafted payload and exe...