Security Advisory

CVE-2025-30036

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-27 10:19:41

Last updated 2025-08-27 16:21:33

Assigner CERT-PL

State PUBLISHED

Description

Stored XSS vulnerability exists in the "Oddział" (Ward) module, in the death diagnosis description field, and allows the execution of arbitrary JavaScript code. This can lead to session hijacking of other users and potentially to privilege escalation up to full administrative rights.

← Browse all CVEs View on cve.org ↗