CVE-2025-2130

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown code of the component Ticket Bearbeiten Page. The manipulation of the argument Notizen leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Mar 9, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-213007.5Windows Universal Plug and Play (UPnP) Device Host Denial of Service VulnerabilityCVE-2025-213016.5Windows Geolocation Service Information Disclosure VulnerabilityCVE-2025-213028.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-213038.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-213047.8Microsoft DWM Core Library Elevation of Privilege VulnerabilityCVE-2025-213058.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-213068.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-213079.8Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityCVE-2025-213086.5Windows Themes Spoofing VulnerabilityCVE-2025-213098.1Windows Remote Desktop Services Remote Code Execution VulnerabilityCVE-2025-21314.8A vulnerability was found in dayrui XunRuiCMS up to 4.6.3. It has been rated as problematic. This issue affects some unknown processing of tCVE-2025-213106.6Windows Digital Media Elevation of Privilege Vulnerability