Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-59905

Reflected Cross-Site Scripting (XSS) in Kubysoft

Description

Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’. This flaw allows the injection of arbitrary client-side scripts, which are immediately reflected in the HTTP response and executed in the victim's browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubysoft Kubysoft

Default version status: unaffected

  • All versionsaffected

References