CVE-2025-13873 — The feature to import a survey is prone to stored Cross-Site Script attacks

CVE-2025-13873

The feature to import a survey is prone to stored Cross-Site Script attacks PUBLISHED

Description (CNA)

Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject arbitrary JavaScript code, which executes in the browsing context of any visitor accessing the compromised survey.

Affected (CNA)

Vendor / product	Versions
ObjectPlanet / Opinio	affected 7.26 rev12562

CWE

CWE-79

References

https://www.objectplanet.com/opinio/changelog.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.