TI-2025-07085 CVE-2025-7760 · GHSA-48x5-gvrv-cf3vReflected XSS in Ofisimo's Association Web Package FloraPriority LOW 33Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ofisimo Web-Based Software Technologies Association Web Package Flora allows XSS Through HTTP Headers.CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00313 · Published 2026-02-03 · No fix listed CWE-79