CVE-2025-0424

In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple authenticated stored cross-site scripting vulnerabilities. An authenticated attacker is able to compromise the sessions of other users on the server by injecting JavaScript code into their session using an "Authenticated Stored Cross-Site Scripting". Those other users might have more privileges than the attacker, enabling a form of horizontal movement.

The following products are affected by CVE-2025-0424 vulnerability.

No data.

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-0424.

URL	Resource
https://www.cordaware.com/changelog/en/version-6_4_0_4-release-13_02_2025.html