medium5.4
CVE-2025-61994
Cross-site scripting vulnerability exists in GROWI prior to v7.2.10.
Impact
Cross-site scripting vulnerability exists in GROWI prior to v7.2.10. If a malicious user creates a page containing crafted contents, an arbitrary script may be executed on the web browser of a victim user who accesses the page.
Affected products
| Product | Affected versions |
|---|---|
| GROWI | before 7.2.10. |
Versions were read from the advisory text. No structured product data has been published for this record yet.