CVE-2025-31165

Cross Site Scripting in NightWolf Penetration Platform PUBLISHED

Description (CNA)

Cross-Site Scripting (XSS) vulnerability in the Logbug module of NightWolf Penetration Testing Platform 1.2.2 allows attackers to execute JavaScript through the markdown editor feature.

Affected (CNA)

Vendor / product	Versions
FPT Software / NightWolf Penetration Platform	affected 1.2.2; unaffected 1.2.3

CWE

CWE-79

References

https://bug.report.night-wolf.io/changelogs

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.