EUVD-2025-209773

A reflected cross-site scripted XSS vulnerability in the dfm-menuorderopt.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61314

CVE-2025-61314 describes a reflected XSS in the dfm-menu_orderopt.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c. The vulnerability allows an attacker to inject a crafted payload into an unfiltered variable value, causing arbitrary Javascript execution in the context of an...

PT-2026-39606

A reflected cross-site scripted XSS vulnerability in the dfm-menu departments.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...