CVE-2025-51531 – Sage DPW Reflected Cross-Site Scripting (XSS)

CVE ID : CVE-2025-51531

Published : Aug. 6, 2025, 4:15 p.m. | 1 hour, 30 minutes ago

Description : A reflected cross-site scripting (XSS) vulnerability in Sage DPW v2024.12.003 allows attackers to execute arbitrary JavaScript in the context of a victim’s browser via injcting a crafted payload into the tabfields parameter at /dpw/scripts/cgiip.exe/WService. This is fixed in Halbjahresversion 2024_12_004.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…