CVE-2025-1420 – Konsola Proget Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-1420

Published : May 21, 2025, 1:16 p.m. | 1 hour, 56 minutes ago

Description : Input provided in a field containing “activationMessage” in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.

This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite).

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…