Verge3D Publishing and E-Commerce, CVE-2025-22709

CVE, Research URL: CVE-2025-22709
Home page URL: Security reports for Verge3D Publishing and E-Commerce
Application: Verge3D Publishing and E-Commerce
Published on: Jan 21, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soft8Soft LLC Verge3D allows Reflected XSS. This issue affects Verge3D: from n/a through 4.8.0.
Affected versions: Min -, max 4.8.1.
Status: vulnerable