cleantalk
Vulnerabilities and Security Researches

Blox Lite, CVE-2025-62940

CVE, Research URL

CVE-2025-62940

Application

Blox Lite

Published on
Oct 27, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nick Diego Blox Lite blox-lite allows Stored XSS.This issue affects Blox Lite: from n/a through <= 1.2.8.
Affected versions
max 1.2.8.
Status
vulnerable