CVE-2025-52180

MEDIUM · 6.1 CVSS Gepubliceerd: 30-10-2025 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthenticated attackers to inject arbitrary JavaScript via the pHtmlSource parameter of the /ahi/jsp/gsfr_feditorHTML.jsp?pHtmlSource endpoint.

Vendors

Zucchetti

Affected products

Ad Hoc Infinity

References

gist.github.com
www.zucchetti.it