CVE-2025-69362

Name of the Vulnerable Software and Affected Versions POSIMYTH UiChemy versions through 4.4.2

Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting (XSS). This means malicious scripts can be stored on the target server and executed by other users when they view the affected web page. The vulnerability exists due to insufficient sanitization of user-supplied data before it is included in the generated web page. This could allow an attacker to inject arbitrary scripts into the web page, potentially leading to the compromise of user accounts or sensitive information.

Recommendations Update POSIMYTH UiChemy to a version later than 4.4.2.