PT-2025-17754
CVE-2025-39397
·
Published
2025-04-21
·
Updated
2025-04-25
Description by
CVSS 3.1
7.1
HighMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Anything Popup versions n/a through 7.3
Description
The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS, where an attacker can inject malicious scripts into a website.
Recommendations
For versions n/a through 7.3, update to a version that fixes the Cross-site Scripting issue to prevent Reflected XSS attacks.
As a temporary workaround, consider restricting user input to prevent malicious scripts from being injected into the web page.
Avoid using the Anything Popup until the issue is resolved.
Found an issue in the description? Have something to add? Feel free to write us 👾