Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-22373

XSS, HTML and Style injection on login page

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and alternation of CSS Styles This issue affects BASEC: from 14 Dec 2021.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SicommNet BASEC

Default version status: unknown

  • 14 Dec 2021 to ≤ *affected

References