CVEvulnerability
CVE-2025-61550
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-01-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
Cross-Site Scripting (XSS) is present on the ctl00_Content01_fieldValue parameters on the /psp/appNet/TemplateOrder/TemplatePreview.aspx endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 19.69). User-supplied input is stored and later rendered in HTML pages without proper output encoding or sanitization. This allows attackers to persistently inject arbitrary JavaScript that executes in the context of other users' sessions
Affected configurations
• edubusinesssolutions print shop pro webdesk 18.34
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2025-61550 Exploit, Third Party Advisory
- https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2025-61550 Exploit, Third Party Advisory