PT-2026-46312 · Arket · Globe Document Intelligence

CVE-2025-65640

·

Published

2026-06-04

·

Updated

2026-06-05

CVSS v3.1

6.3

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions Arket Globe Document Intelligence version 5.0.0.559
Description Cross Site Scripting (XSS) occurs in the "Task in Progress / Recent" page due to improper sanitization of user input in text fields during the creation of a new document. An authenticated attacker can submit data containing JavaScript code that the application fails to properly sanitize or escape. This allows the execution of arbitrary JavaScript in the browsers of other users who view the affected page.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-65640

Affected Products

Globe Document Intelligence