CVE-2025-62527

HighCVSS 7.1/10Last modified Oct 8, 2026

Description

Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to set the email if clicked by the victim. This issue has been patched in version 1.5.0.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Weakness enumeration

CWE-15

Affected software

VendorProductVersions
remram44taguette< 1.5.0

References

Timeline

Published
Oct 20, 2025
Last modified
Oct 8, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-625285.4Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for CVE-2025-62537.5The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, CVE-2025-62549.8The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to theCVE-2025-625498.8Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a netCVE-2025-62556.4The Dynamic AJAX Product Filters for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ paramCVE-2025-625508.8Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.CVE-2025-625527.8Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.CVE-2025-625537.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-625547.8Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-625557.0Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-625567.8Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-625577.8Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62527: High severity, CVSS 7.1 | Vulnix