CVE-2025-27447 - CERT CVE
ID CVE-2025-27447
Sažetak The web application is susceptible to cross-site-scripting attacks. An attacker can create a prepared URL, which injects JavaScript code into the website. The code is executed in the victim’s browser when an authenticated administrator clicks the link.
Reference
CVSS
Base: 7.4
Impact: 4.0
Exploitability:2.8
Pristup
VektorSloženostAutentikacija
NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
HIGH NONE NONE
CVSS vektor CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Zadnje važnije ažuriranje 03-07-2025 - 15:13
Objavljeno 03-07-2025 - 12:15