Unrated
A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0...
CVE-2025-60917
First seen on SecPulse
Original description The description as published by the source.
A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the color parameter.
References
- advisory github.com
- advisory nvd.nist.gov
- web sec4you-pentest.com
- web sec4you-pentest.com