CVE-2025-59905 — Reflected Cross-Site Scripting (XSS) in Kubysoft

CVE-2025-59905

Reflected Cross-Site Scripting (XSS) in Kubysoft PUBLISHED

Description (CNA)

Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’. This flaw allows the injection of arbitrary client-side scripts, which are immediately reflected in the HTTP response and executed in the victim's browser.

Affected (CNA)

Vendor / product	Versions
Kubysoft / Kubysoft	affected All versions

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-kubysoft

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.