Security Advisory

CVE-2025-53834

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-14 22:49:18
Last updated 2025-07-15 19:49:38
Assigner GitHub_M
CVSS score not scored
State PUBLISHED

Description

Caido is a web security auditing toolkit. A reflected cross-site scripting (XSS) vulnerability was discovered in Caido’s toast UI component in versions prior to 0.49.0. Toast messages may reflect unsanitized user input in certain tools such as Match&Replace and Scope. This could allow an attacker to craft input that results in arbitrary script execution. Version 0.49.0 fixes the issue.