CVE-2025-27921
A reflected cross-site scripting (XSS) vulnerability was discovered in Output Messenger before 2.0.63, where unsanitized input could be injected into the web application’s respo…
Published: 2025-05-05 · CVSS: 6.1 · CVSS 3.1
A reflected cross-site scripting (XSS) vulnerability was discovered in Output Messenger before 2.0.63, where unsanitized input could be injected into the web application’s response. This vulnerability occurs when user-controlled input is reflected back into the browser without proper sanitization or encoding.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7