Vulnerabilities and Security Researches

Cornerstone, CVE-2025-63072

CVE, Research URL: CVE-2025-63072
Home page URL: Security reports for Cornerstone
Application: Cornerstone
Published on: Dec 09, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in THEMECO Cornerstone cornerstone allows Stored XSS.This issue affects Cornerstone: from n/a through <= 7.7.3.
Affected versions: max 7.7.3.
Status: vulnerable