CVE-2025-52344

Description

Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.

PUBLISHED Reserved 2025-06-16 | Published 2025-09-15 | Updated 2025-09-15 | Assigner mitre

References

www.explorance.com/products/blue

gist.github.com/SaraAlsaif/f363b307f29c865d499678eca3106b43

cve.org (CVE-2025-52344)

nvd.nist.gov (CVE-2025-52344)

Download JSON