PT-2025-53881
CVE-2025-68992
·
Published
2025-12-22
·
Updated
2026-10-05
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
xenioushk BWL Knowledge Base Manager versions through 1.6.3
Description
The software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be stored and executed within the application, potentially affecting users who access the compromised content.
Recommendations
Update xenioushk BWL Knowledge Base Manager to a version later than 1.6.3.
Found an issue in the description? Have something to add? Feel free to write us 👾