Skip to content
OpenAdvisories
Medium · 4.7 CVE-2025-0878 EUVD-2025-26601GHSA-g589-hq5q-555g

XSS in Akinsoft's LimonDesk

Published Sep 3, 2025 · Updated Jun 6, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft LimonDesk allows Cross-Site Scripting (XSS).

This issue affects LimonDesk: from s1.02.14 before v1.02.17.

Affected products

VendorProductAffectedFixed
Akinsoft LimonDesk s1.02.14 – < v1.02.17 v1.02.17

References