Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component (…
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00337·Published 2025-09-16·Fixed in 53.21.0CWE-116
Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global Technologies HumanSuite allows Exploiting Trust in…
CVSS 3.1MEDIUM 6.5·Network·Low privileges·No interaction·EPSS 0.00288·Published 2025-09-16·Fixed in 53.21.0CWE-285