CVE-2025-31165

Name of the Vulnerable Software and Affected Versions NightWolf Penetration Testing Platform version 1.2.2

Description The issue is related to a Cross-Site Scripting (XSS) vulnerability in the Logbug module, which allows attackers to execute JavaScript through the markdown editor feature.

Recommendations For NightWolf Penetration Testing Platform version 1.2.2, consider disabling the markdown editor feature in the Logbug module until a patch is available. Restrict access to the Logbug module to minimize the risk of exploitation. Avoid using the markdown editor feature in the affected version until the issue is resolved.