CVEvulnerability

CVE-2025-26127

5.0 MEDIUM Published 2025-03-17 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2025-03-17
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 5.0 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
Weaknesses: CWE-79

Description

A stored cross-site scripting (XSS) vulnerability in the Send for Approval function of FileCloud v23.241.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References

https://github.com/pentesttoolscom/vulnerability-research/tree/master/CVE-2025-26127 github.com
https://www.filecloud.com/supportdocs/fcdoc/latest/server/release-notes/filecloud-version-23-241-release-notes/minor-filecloud-release-23-241-3 www.filecloud.com

CVE-2025-26127

Description

Related

Weakness · CWE (1)

References