medium5.4
CVE-2025-25476
A stored cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows a malicious user with elevated privileges to execute arbitrary Javascript code by spe…
Impact
A stored cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows a malicious user with elevated privileges to execute arbitrary Javascript code by specifying a malicious XSS payload as a notification type or notification component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Syspass | Syspass | from 3.2.0 through 3.2.11 |