CNNVD-202509-1868 Information
Sep 14, 2025
cve
CNNVD ID
CNNVD-202509-1868
Related CVE
- CNNVD Published: 2025-09-14
Description (Chinese)
Selleo Mentingo是波兰Selleo公司的一款企业内部培训与员工发展平台。 Selleo Mentingo 2025.08.27版本存在代码注入漏洞，该漏洞源于对文件/api/course/enroll-course中参数Description的错误操作，可能导致跨站脚本攻击。
Description (English)
Selleo Mentingo is an in-house training and staff development platform for the Polish company Seleo. Version 2025.08.27 of Selleo Mentingo contains a code-injection loophole, which stems from an error in the parameter Description in file/api/course/enroll-course, which may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
Sensaphone
Published
2025-09-14
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.323823 https://vuldb.com/?id.323823 https://gist.github.com/KhanMarshaI/584ae9d7ba8578ac040a0f89597fc3c1 https://vuldb.com/?submit.643623 https://access.redhat.com/security/cve/cve-2025-10388
Share on: