CVE-2025-61431

A reflected cross-site scripted (XSS) vulnerability exists in the Zucchetti ZMaintenance Infinity and Infinity Zucchetti software versions v4.1 and earlier . The flaw resides in the /jsp/gsfr_feditorHTML.jsp endpoint, where the application fails to properly neutralize input provided to the pHtmlS...