Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-51053 EUVD-2025-23881GHSA-xcw3-87mh-87xm

A Cross-site scripting (XSS) vulnerability in /api_vedo/ in Vedo Suite version 2024.17 allows remote attackers to inject arbitrary Javascri…

Published Aug 6, 2025 · Updated Jul 5, 2026 · Assigned by mitre

Description

A Cross-site scripting (XSS) vulnerability in /api_vedo/ in Vedo Suite version 2024.17 allows remote attackers to inject arbitrary Javascript or HTML code and potentially trigger code execution in victim's browser.

References