CVE-2025-61074

The adata Software GmbH Mitarbeiter Portal version 2.15.2.0 is affected by a stored Cross Site Scripting (XSS) vulnerability within the bulletin board (SchwarzeBrett ) component. The root cause is the improper neutralization of the Inhalt parameter in the /SchwarzeBrett/Nachrichten/CreateNachrich...

CVE-2025-61075

The adata Software GmbH Mitarbeiterportal version 2.15.2.0 is affected by multiple Incorrect Access Control vulnerabilities. These flaws allow remote authenticated users with low privileges to perform administrative functions and manipulate data belonging to other users by making unauthorized API...