CVE-2025-60916 – Austrian Archaeological Institute Openatlas Reflected Cross-Site Scripting (XSS)

CVE ID : CVE-2025-60916

Published : Nov. 24, 2025, 4:15 p.m. | 1 hour, 7 minutes ago

Description : A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user’s browser via injecting a crafted payload into the charge parameter.

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…