ГлавнаяУязвимости → CVE-2025-61312
7.3высокая

CVE-2025-61312

Описание

A reflected cross-site scripted (XSS) vulnerability in the acc-menu_pricess.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

CVSS
Балл7.3 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Источники
https://ZeroBreach.dehttps://gist.github.com/ZeroBreach-GmbH/c970fab734432e6f9bc39b2d20f96e5chttps://www.docuform.de/