CVE-2025-2154 — Stored XSS in EchoCCS's Specto CM
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows S…
Published: 2025-12-24 · CVSS: 5.4 · CVSS 3.1
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Stored XSS. This issue affects Specto CM: before 17032025.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7