medium6.1
CVE-2025-1798
The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site S…
Impact
The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Italia | Design Comuni Italia | before 1.1.2 |