Vulnerability Description
In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple authenticated stored cross-site scripting vulnerabilities. An authenticated attacker is able to compromise the sessions of other users on the server by injecting JavaScript code into their session using an "Authenticated Stored Cross-Site Scripting". Those other users might have more privileges than the attacker, enabling a form of horizontal movement.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-0424?
CVE-2025-0424 is a documented vulnerability. In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple authenticated stored cross-site scripting vulnerabilities. An authenticated attacker is able t...
How severe is CVE-2025-0424?
CVSS scoring is not yet available for CVE-2025-0424. Check NVD for updates.
Is there a patch for CVE-2025-0424?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.