CVE-2025-8276 — HTML Injection in Patika Global Technologies' HumanSuite
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements…
Published: 2025-09-16 · CVSS: 4.3 · CVSS 3.1
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Patika Global Technologies HumanSuite allows Cross-Site Scripting (XSS), Phishing. This issue affects HumanSuite: before 53.21.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7