Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-61190 EUVD-2025-209096GHSA-68p2-v646-58j6

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functiona…

Published Mar 27, 2026 · Updated Jul 5, 2026 · Assigned by mitre

Description

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality. The vulnerability exists due to improper sanitization of user-supplied input via the filter_type_1 parameter.

References