Dashboard / CVE-2025-52344

CVE-2025-52344

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 52/100
Published: 2025-09-15 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Network No Auth Conf. Impact Scope Change

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: Required
S: Changed
C: High
I: None
A: None

Description

Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
explorance blue 8.1.2

References & Advisories (2)

Bug Bounty Relevance

52 / 100
✓ Network accessible
✓ No authentication

CVSS Score

6.1 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

EPSS — Exploitation Probability

0.33%
Raw Score 0.003270
Percentile 26.2%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00327
2026-11-12
0.00327
2026-11-10
0.00327
2026-11-09
0.00327
2026-11-08
0.00327
2026-11-07
0.00327
2026-11-06
0.00327
2026-11-05
0.00327

Intelligence Sources

nvd ref →

External Links