Home

Description

A reflected cross-site scripted (XSS) vulnerability in the acc-menu_pricess.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

PUBLISHED Reserved 2025-09-26 | Published 2026-05-11 | Updated 2026-05-11 | Assigner mitre

References

www.docuform.de/

ZeroBreach.de

gist.github.com/...ach-GmbH/c970fab734432e6f9bc39b2d20f96e5c

cve.org (CVE-2025-61312)

nvd.nist.gov (CVE-2025-61312)

Download JSON