CVE-2025-9728 – Givanz Vvveb Cross Site Scripting Vulnerability

CVE ID : CVE-2025-9728

Published : Aug. 31, 2025, 12:15 p.m. | 2 hours, 44 minutes ago

Description : A security vulnerability has been detected in givanz Vvveb 1.0.7.2. This affects an unknown part of the file app/template/user/login.tpl. Such manipulation of the argument Email/Password leads to cross site scripting. The attack can be executed remotely. The name of the patch is bbd4c42c66ab818142240348173a669d1d2537fe. Applying a patch is advised to resolve this issue.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…