CNNVD-202510-4235 Information
Oct 30, 2025
cve
CNNVD ID
CNNVD-202510-4235
Related CVE
- CNNVD Published: 2025-10-30
Description (Chinese)
URVE Smart Office是波兰URVE Smart Office公司的一套智能办公资源管理系统。 URVE Smart Office 1.1.24之前版本存在跨站脚本漏洞，该漏洞源于报告问题功能中存在存储型跨站脚本，可能导致恶意载荷执行。
Description (English)
URVE Smart Office is a smart office resource management system for URVE Smart Office in Poland. The previous version of URLSmart Office 1.1.24 had a cross-site script loophole, which stemmed from the existence of a storage-type cross-site script in the reporting problem function and could lead to malicious payload execution.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
URVE Smart Office
Published
2025-10-30
Last Modified
2026-02-24
References
https://cert.pl/posts/2025/10/CVE-2025-10348 https://smartoffice.expert/
Patch
https://smartoffice.expert/pl/
Share on: