CVE-2025-12264 — Wisencode Create Support Ticket create cross site scripting

CVE-2025-12264

Wisencode Create Support Ticket create cross site scripting PUBLISHED

Description (CNA)

A security flaw has been discovered in Wisencode up to 20251012. Affected by this vulnerability is an unknown functionality of the file /support-ticket/create of the component Create Support Ticket Handler. The manipulation of the argument Message results in cross site scripting. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
n/a / Wisencode	affected 20251012

CWE

CWE-79, CWE-94

References

https://vuldb.com/?id.329935
https://vuldb.com/?ctiid.329935
https://vuldb.com/?submit.673806

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.