CVE-2025-63498

Publication date

2025-11-24 00:00:00

Family

mitre

State

PUBLISHED

Description

alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.