CVE-2025-10558

The CVE-2025-10558 entry describes a stored Cross-site Scripting (XSS) vulnerability in 3DSearch within Dassault Systèmes’ 3DSwymer, affecting Release 3DEXPERIENCE R2025x. The underlying issue is an XSS flaw in 3DSearch that allows an attacker to execute arbitrary scripts in a user’s browser sess...