CVE-2025-68566

Name of the Vulnerable Software and Affected Versions My auctions allegro versions prior to 3.6.36

Description Stored Cross-Site Scripting occurs due to improper neutralization of input during web page generation, specifically caused by insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access and above to inject arbitrary web scripts into pages. The issue specifically affects multi-site installations and environments where unfiltered html has been disabled.

Recommendations Update to a version newer than 3.6.35.