CVE-2025-60917 – Austrian Archaeological Institute Openatlas Reflected Cross-Site Scripting (XSS)

CVE ID : CVE-2025-60917

Published : Nov. 24, 2025, 4:15 p.m. | 1 hour, 7 minutes ago

Description : A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user’s browser via injecting a crafted payload into the color parameter.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…