PT-2025-54440

CVE-2025-23707

Published

2025-03-19

Updated

2026-09-23

Description by

CVSS 3.1

7.1

High

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Matamko En Masse versions through 1.0

Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting (XSS). This allows an attacker to inject malicious scripts into web pages viewed by other users. The vulnerable component does not properly sanitize user-supplied input before including it in the generated web page. This could allow an attacker to execute arbitrary JavaScript code in the context of the user's browser.

Recommendations Versions prior to 1.0 should be updated.

Exploitability

Fix

Impacts

Researchers

João Pedro S Alcântara

Kinorth

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers