medium6.1
CVE-2025-46320
A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution.
Impact
A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4 and FileMaker Server 21.1.7.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Claris | Filemaker Server | before 21.1.7 from 22.0.1 before 22.0.4 |