CVE-2025-56252

A Cross-Site Scripting (XSS) vulnerability exists in ServitiumCRM version 2.10 . The flaw is caused by the improper neutralization of input during web page generation, specifically involving the mishandling of the mobile parameter . An attacker can exploit this by providing a crafted URL to execu...