CVE-2025-8535

Name of the Vulnerable Software and Affected Versions cronoh NanoVault versions up to 1.2.1

Description A problematic issue exists in cronoh NanoVault due to a cross-site scripting condition. The issue affects the executeJavaScript function within the /main.js file of the xrb URL Handler component. This can be initiated remotely. The exploit has been publicly disclosed.

Recommendations Versions prior to 1.2.1 should be updated. As a temporary workaround, consider restricting access to the /main.js file or disabling the xrb URL Handler component until a patch is available.