← Database

CVE-2025-1798

MEDIUM CVSS: 6.1 Published: 2025-03-25 Modified: 2026-06-17

Description

The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks.

Affected Platforms

Italia Design Comuni Italia

Weakness Type

CWE-352

References