CNNVD-202512-260 Information

CNNVD ID

CNNVD-202512-260

CVE-2025-13873

  • CNNVD Published: 2025-12-02

Description (Chinese)

ObjectPlanet Opinio是挪威ObjectPlanet公司的一个在线调查系统。 ObjectPlanet Opinio 7.26 rev12562版本存在安全漏洞,该漏洞源于调查导入功能存在存储型跨站脚本,可能导致攻击者注入任意JavaScript代码。

Description (English)

ObjectPlanet Opinio is an online investigation system of ObjectPlant, Norway. There is a security loophole in the version 7.26 rev12562 of ObjectivePlanet Opinio, which stems from the existence of a storage cross-site script for the investigative import function, which could result in the aggressor being injected into any JavaScript code.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

ObjectPlanet

Published

2025-12-02

Last Modified

2026-02-24

References

https://www.objectplanet.com/opinio/changelog.html

Patch

https://www.objectplanet.com/

Share on: