medium5.5
CVE-2025-28097
OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.
Impact
OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Onenav | Onenav | Version 1.1.0 |