CVE-2025-56313

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the /publix/run endpoint of JATOS 3.7.1 through 3.9.6 inclusive. This allows remote attackers to execute arbitrary JavaScript in a user's web browser by including a malicious payload in the "code" URL parameter. When an...

CVE-2025-56313

JATOS versions 3.7.1 through 3.9.6 are affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the /publix/run endpoint. The root cause is the lack of proper filtering for the "code" URL parameter, allowing remote attackers to execute arbitrary JavaScript in a user's browser. If an au...