Skip to content
OpenAdvisories

Archive

20 November 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2025-64027 Public exploit

    Snipe-IT has Cross-site Scripting vulnerability in CSV import workflow

    Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow. When an invalid CSV file is uploaded, the application returns a progress_message value that is rendered as raw HTML in the admin interface.…

  • Medium 6.1
    CVE-2025-63848 Public exploit

    Stored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code…