Security Advisory

CVE-2025-5254

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-25 11:30:28
Last updated 2026-06-05 14:33:24
Assigner TR-CERT
CVSS score 6.1
State PUBLISHED

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kron Technologies Kron PAM allows Stored XSS. This issue affects Kron PAM: before 3.7.