Home

Description

A reflected cross-site scripting (XSS) vulnerability was discovered in Output Messenger before 2.0.63, where unsanitized input could be injected into the web application’s response. This vulnerability occurs when user-controlled input is reflected back into the browser without proper sanitization or encoding.

PUBLISHED Reserved 2025-03-10 | Published 2025-05-05 | Updated 2025-05-05 | Assigner mitre

References

www.srimax.com/products-2/output-messenger/

www.outputmessenger.com/cve-2025-27921/

cve.org (CVE-2025-27921)

nvd.nist.gov (CVE-2025-27921)

Download JSON