CVE-2024-25662

May 14, 2024, 4:13 p.m.

Product(s) Impacted

Oxygen XML Web Author

  • v26.0.0 and older

Oxygen Content Fusion

  • v6.1 and older

Oxygen XML Web Author

  • 26.0.0 and older

Oxygen Content Fusion

  • 6.1 and older

Description

Oxygen XML Web Author v26.0.0 and older and Oxygen Content Fusion v6.1 and older are vulnerable to Cross-Site Scripting (XSS) for malicious URLs.

Weaknesses

Date

Published: May 14, 2024, 3:05 p.m.

Last Modified: May 14, 2024, 4:13 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References