Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-5254

Stored XSS in Kron Technologies' Kron PAM

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kron Technologies Kron PAM allows Stored XSS. This issue affects Kron PAM: before 3.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kron Technologies Kron PAM

Default version status: unaffected

  • 0 to < 3.7affected

References