2 matches found
CVE-2025-61319
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can b...
6.1CVSS6.1AI score0.00285EPSS
SaveExploits1References1
CVE-2025-61319
ReNgine versions up to and including 2.2.0 are vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the Vulnerabilities module . The root cause is the lack of proper sanitization and HTML encoding for user-supplied input when rendering scan results in the web user interface. An atta...
6.1CVSS6.1AI score0.00285EPSS
SaveExploits1References2Affected Software1
20