CVE-2025-57393

Publication date

2025-10-01 00:00:00

Family

mitre

State

PUBLISHED

Description

A stored cross-site scripting (XSS) in Kissflow Work Platform Kissflow Application Versions 7337 Account v2.0 to v4.2vallows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.