Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Kubysoft Clear all filters
TI-2025-37314 CVE-2025-59904 · GHSA-qrxh-hqj2-g6xg

Stored Cross-Site Scripting vulnerability in Kubysoft

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00158 Published 2026-02-16 No fix listed CWE-79
TI-2025-37313 CVE-2025-59903 · GHSA-fvcr-8w5m-c388

Stored Cross-Site Scripting (XSS) in Kubysoft

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, where uploaded SVG images are not properly sanitized.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00158 Published 2026-02-16 No fix listed CWE-79
TI-2025-37315 CVE-2025-59905 · GHSA-37cc-q9ww-mg9w

Reflected Cross-Site Scripting (XSS) in Kubysoft

Priority LOW 21

Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.0016 Published 2026-02-16 No fix listed CWE-79