CVE-2025-61311

The docuForm FSM Server (developed by GmbH Mecury Managed Print Services) version 11.11c contains a reflected cross-site scripted (XSS) vulnerability within the dfm-menu_alerts.php component. This flaw occurs because the application fails to properly neutralize input, allowing attackers to execut...

CVE-2025-61307

A reflected cross-site scripted XSS vulnerability in the acc-menupapers.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...