CVE-2025-28919

Name of the Vulnerable Software and Affected Versions: Shellbot Easy Image Display versions 1.2.5 and earlier

Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting (XSS). This enables attackers to inject malicious scripts into the application, potentially leading to unauthorized actions on behalf of other users.

Recommendations: For versions 1.2.5 and earlier, update to a version that fixes the improper neutralization of input during web page generation to prevent stored XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.