CVE-2025-28254

Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensitive information via the first name field in processMentions...

Leantime 安全漏洞

Leantime is a Leantime open source goal-centered project management system for non-project managers. A security vulnerability exists in Leantime v3.2.1 and earlier versions, which stems from cross-site scripting in the processMentions function and could lead to the execution of arbitrary code and...

CVE-2025-28254

Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensitive information via the first name field in processMentions...

CVE-2025-28254: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensitive information via the first name field in processMentions...

PT-2025-13577 · Leantime · Leantime

Name of the Vulnerable Software and Affected Versions: Leantime versions 3.2.1 and earlier Description: The issue allows an authenticated attacker to execute arbitrary code and obtain sensitive information via the first name field in the processMentions function. This is a Cross Site Scripting...