Description (CNA)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and alternation of CSS Styles This issue affects BASEC: from 14 Dec 2021.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SicommNet / BASEC | affected 14 Dec 2021 through * |
CWE
CWE-79
References
- https://basec.sicomm.net/login/
- https://csirt.divd.nl/DIVD-2025-00001
- https://csirt.divd.nl/CVE-2025-22373
ADP enrichment
No English description supplied.
No references supplied.