Security Advisory

CVE-2025-60948

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-23 21:00:28

Last updated 2026-03-25 14:47:20

Assigner cisa-cg

State PUBLISHED

Description

Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious javascript that executes in a victims browser. Fixed in 8.1.0 alpha.

← Browse all CVEs View on cve.org ↗