CVE-2025-25018

HIGH CVSS: 8.7 Published: 2025-10-10 Modified: 2026-06-17

Description

Improper Neutralization of Input During Web Page Generation in Kibana can lead to stored Cross-Site Scripting (XSS)

Elastic Kibana

CWE-79