CVE-2025-52344

6.1 mediumEPSS 0.3%

Medium (6.1) in explorance blue. EPSS 0.3% chance of exploitation in the next 30 days.

Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-09-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

explorance:blue

References

https://gist.github.com/SaraAlsaif/f363b307f29c865d499678eca3106b43
https://www.explorance.com/products/blue

Check your stack JSON