medium6.1
CVE-2025-63499
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.
Impact
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alinto | Sogo | through 5.12.4 |