PT-2026-50272
CVE-2025-59560
·
Published
2025-10-06
·
Updated
2026-10-12
Description by
CVSS 3.1
7.1
HighMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Sonaar versions prior to 4.27.5
Description
Unauthenticated Cross Site Scripting (XSS), a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users without requiring authentication.
Recommendations
Update to a version newer than 4.27.4.
Found an issue in the description? Have something to add? Feel free to write us 👾