CVE-2025-61431 – Zucchetti ZMaintenance Infinity Reflected Cross-Site Scripting (XSS)

CVE ID : CVE-2025-61431

Published : Nov. 4, 2025, 8:17 p.m. | 1 hour, 11 minutes ago

Description : A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity v4.1 allows attackers to execute arbitrary Javascript in the context of a user’s browser via injecting a crafted payload into the pHtmlSource parameter.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…