Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-13873

The feature to import a survey is prone to stored Cross-Site Script attacks

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TCS-CERT

Description

Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject arbitrary JavaScript code, which executes in the browsing context of any visitor accessing the compromised survey.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ObjectPlanet Opinio

Default version status: unknown

  • 7.26 rev12562affected

References