cleantalk
Vulnerabilities and Security Researches

NPS computy, CVE-2025-67984

CVE, Research URL

CVE-2025-67984

Application

NPS computy

Published on
Feb 20, 2026
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in calliko NPS computy nps-computy allows DOM-Based XSS.This issue affects NPS computy: from n/a through <= 2.8.2.
Affected versions
max 2.8.2.
Status
vulnerable