medium6.1
CVE-2025-5254
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kron Technologies Kron PAM allows Stored XSS.
Impact
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kron Technologies Kron PAM allows Stored XSS. This issue affects Kron PAM: before 3.7.
Affected products
| Product | Affected versions |
|---|---|
| Kron PAM | before 3.7. |
Versions were read from the advisory text. No structured product data has been published for this record yet.