Evangelische Termine, CVE-2025-28960

CVE, Research URL: CVE-2025-28960
Home page URL: Security reports for Evangelische Termine
Application: Evangelische Termine
Published on: Jun 27, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in regibaer Evangelische Termine allows Reflected XSS. This issue affects Evangelische Termine: from n/a through 3.3.
Affected versions: Min -, max 3.3.
Status: vulnerable