← Database

CVE-2025-68395

N/A CVSS: N/A Published: 2026-10-30 Modified: 2026-10-30

Description

ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privileged attacker can inject arbitrary HTML and JS into notes, which will be rendered/executed when a user visits this module. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67

Affected Platforms

Unknown

Weakness Type

CWE-79

References