CVE-2025-45315

The hortusfox-web v4.4 software contains a cross-site scripting (XSS) vulnerability in the /controller/admin.php endpoint. The root cause is the improper neutralization of input, specifically allowing attackers to inject a crafted payload into the email parameter. Successful exploitation enables ...