← Database

CVE-2025-46703

MEDIUM CVSS: 6.4 Published: 2025-09-19 Modified: 2026-06-17

Description

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-Site Scripting (XSS). This issue affects BlueSpice: from 5 through 5.1.1.

Affected Platforms

Hallowelt Bluespice

Weakness Type

CWE-116, CWE-79

References