Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-31165 EUVD-2025-8269GHSA-5rqf-7xxv-3745

Cross Site Scripting in NightWolf Penetration Platform

Published Mar 27, 2025 · Updated Mar 28, 2025 · Assigned by FSOFT

Description

Cross-Site Scripting (XSS) vulnerability in the Logbug module of NightWolf Penetration Testing Platform 1.2.2 allows attackers to execute JavaScript through the markdown editor feature.

Affected products

VendorProductAffectedFixed
FPT Software NightWolf Penetration Platform 1.2.2 1.2.3

References