CVE-2025-13064
A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possi…
Published: 2026-02-10 · CVSS: 4.5 · CVSS 3.1
A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible if the admin uses a client that have been tampered with.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7