Home

Description

A reflected cross-site scripted (XSS) vulnerability in the acc-menu_billings.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

PUBLISHED Reserved 2025-09-26 | Published 2026-05-11 | Updated 2026-05-11 | Assigner mitre

References

www.docuform.de/

ZeroBreach.de

gist.github.com/...ach-GmbH/9d68c717a402aab13eb0d4771a08fc79

cve.org (CVE-2025-61310)

nvd.nist.gov (CVE-2025-61310)

Download JSON