CVE-2025-61994
Cross-site scripting vulnerability exists in GROWI prior to v7.2.10. If a malicious user creates a page containing crafted contents, an arbitrary script may be executed on the w…
Published: 2025-11-06 · CVSS: 4.8 · CVSS 4.0
Cross-site scripting vulnerability exists in GROWI prior to v7.2.10. If a malicious user creates a page containing crafted contents, an arbitrary script may be executed on the web browser of a victim user who accesses the page.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7