CVE-2025-59904

Stored Cross-Site Scripting XSS vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint. This issue allows malicious scripts to be injected and executed persistently in the context of users accessing the affected resource...

PT-2026-8323

Name of the Vulnerable Software and Affected Versions Kubysoft affected versions not specified Description A reflected Cross-Site Scripting XSS flaw exists in Kubysoft. The issue occurs through multiple parameters within the API endpoint /node/kudaby/nodeFN/procedure. This allows for the injectio...