PT-2025-11988
CVE-2025-30092
·
Published
2025-03-19
·
Updated
2025-03-20
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Intrexx Portal Server versions 11.x through 11.9.2
Intrexx Portal Server versions 12.x through 12.0.2
Description
The issue allows for XSS in multiple Velocity scripts.
Recommendations
For Intrexx Portal Server versions 11.x through 11.9.2, update to a version later than 11.9.2 to resolve the issue.
For Intrexx Portal Server versions 12.x through 12.0.2, update to a version later than 12.0.2 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾