Read the docs

Kubysoft

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Kubysoft records in CISA KEV

No Kubysoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Kubysoft 3 records LOW

Records

3 records in Kubysoft · all components

TI-2025-37314 CVE-2025-59904 · GHSA-qrxh-hqj2-g6xg

Stored Cross-Site Scripting vulnerability in Kubysoft

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00158 Published 2026-02-16 No fix listed CWE-79
TI-2025-37313 CVE-2025-59903 · GHSA-fvcr-8w5m-c388

Stored Cross-Site Scripting (XSS) in Kubysoft

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, where uploaded SVG images are not properly sanitized.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00158 Published 2026-02-16 No fix listed CWE-79
TI-2025-37315 CVE-2025-59905 · GHSA-37cc-q9ww-mg9w

Reflected Cross-Site Scripting (XSS) in Kubysoft

Priority LOW 21

Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.0016 Published 2026-02-16 No fix listed CWE-79
Open these records in search →