High · 7.1 CVE-2025-25905 EUVD-2025-19107GHSA-2w83-57g8-mjww

Cross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web script or HTML via …

Published Jun 25, 2025 · Updated Jun 25, 2025 · Assigned by mitre

Description

Cross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web script or HTML via the "tree" parameter.

References

https://support.cadclick.com
https://4pace.com/en/products/cadclick
https://medium.com/@mdjab3r/cve-2025-25905-ffff82c635f2