CVE-2025-45315

The hortusfox-web v4.4 application is vulnerable to a cross-site scripting (XSS) flaw in the /controller/admin.php endpoint. The root cause is the improper neutralization of the email parameter, which allows an attacker to inject a crafted payload and execute arbitrary JavaScript within a user's ...