Security Advisory

CVE-2025-57540

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-09 00:00:00

Last updated 2025-09-10 13:45:22

Assigner mitre

State PUBLISHED

Description

A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment (PVE) 8.4. Authenticated users can inject JavaScript code that is later executed in the browsers of users who view the configuration page, enabling client-side attacks.

← Browse all CVEs View on cve.org ↗