Description
A stored cross-site scripting (XSS) in Kissflow Work Platform Kissflow Application Versions 7337 Account v2.0 to v4.2vallows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
High · 8.8
CVE-2025-57393
EUVD-2025-32716GHSA-jmc7-28c7-wx66
A stored cross-site scripting (XSS) in Kissflow Work Platform Kissflow Application Versions 7337 Account v2.0 to v4.2vallows attackers to e…
Published Oct 1, 2025 · Updated Jul 5, 2026 · Assigned by mitre