CVE-2025-52035

A stored cross-site scripting (XSS) vulnerability exists in NotesCMS , specifically within the /index.php?route=notes page. The flaw is caused by improper handling of the service descriptions title , allowing an attacker to inject malicious scripts. This vulnerability was confirmed in the source ...