Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-57880 EUVD-2025-30286GHSA-47gw-9v4f-8f2g

Potential XSS in Extension:BlueSpiceWhoIsOnline

Published Sep 19, 2025 · Updated Sep 19, 2025 · Assigned by HW

Description

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceWhoIsOnline) allows Cross-Site Scripting (XSS).
This issue affects BlueSpice: from 5 through 5.1.1.

Affected products

VendorProductAffectedFixed
Hallo Welt! BlueSpice 5 – ≤ 5.1.1 —

References