Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-31165

Cross Site Scripting in NightWolf Penetration Platform

Description

Cross-Site Scripting (XSS) vulnerability in the Logbug module of NightWolf Penetration Testing Platform 1.2.2 allows attackers to execute JavaScript through the markdown editor feature.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FPT Software NightWolf Penetration Platform

Default version status: unaffected

  • 1.2.2affected
  • 1.2.3unaffected

References