A cross-site scripting (XSS) vulnerability in the data resource management function of Miliaris Amigdala v2.2.6 allows attackers to execute arbitrary HTML in the context of a user's browser via a crafted payload.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://www.miliaris.it/ | product |
https://xaliom.blogspot.com/2025/06/cve-2025-45878cve-2025-45879-and-cve.html | third party advisory |
https://packetstorm.news/files/cve/CVE-2025-45880 |