Skip to content
OpenAdvisories

Vendor

Kubysoft

3 known vulnerabilities.

Products

Kubysoft 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-59904

    Stored Cross-Site Scripting vulnerability in Kubysoft

    Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint. This issue allows malicious scripts to be injected and executed persistently in the context of users accessing the affec…

    Kubysoft Kubysoft
  • Medium 5.1
    CVE-2025-59903

    Stored Cross-Site Scripting (XSS) in Kubysoft

    Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, where uploaded SVG images are not properly sanitized. This allows attackers to embed malicious scripts within SVG files as visual content, which are then stored on the server and executed in the con…

    Kubysoft Kubysoft
  • Medium 4.8
    CVE-2025-59905

    Reflected Cross-Site Scripting (XSS) in Kubysoft

    Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’. This flaw allows the injection of arbitrary client-side scripts, which are immediately reflected in t…

    Kubysoft Kubysoft