CVE-2025-61308: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripted XSS vulnerability in the dfm-menumaintenance.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61308

The docuForm FSM Server (GmbH Mecury Managed Print Services), specifically version v11.11c , contains a reflected cross-site scripted (XSS) vulnerability in the dfm-menu_maintenance.php component. The root cause is the improper neutralization of input during web page generation, where an unfilter...