CVE-2025-61074

A stored Cross Site Scripting (XSS) vulnerability exists in the bulletin board (SchwarzeBrett ) component of adata Software GmbH Mitarbeiter Portal version 2.15.2.0 . The flaw is caused by improper neutralization of the Inhalt parameter within the /SchwarzeBrett/Nachrichten/CreateNachricht and /S...

CVE-2025-61075

The adata Software GmbH Mitarbeiterportal version 2.15.2.0 is affected by multiple Incorrect Access Control vulnerabilities. These flaws allow remote authenticated users with low privileges to perform administrative functions and manipulate the data of other users by making unauthorized API calls...