CVE-2025-56320
Essential information
- Published
- 17/10/2025 19:15
- Modified
- 17/10/2025 19:15
- Author
- —
- Creator
- —
- CISA KEV
- No
- CWE
- —
- CVSS vector
- — — —
Description
Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting (XSS) in its chat box component. This allows a remote attacker to execute arbitrary code
NVD status
- Status
- Received — CVE has been recently published to the CVE List and has been received by the NVD.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| enterprise / contract management portal | cpe:2.3:a:enterprise:contract_management_portal:22.4.0:*:*:*:*:*:*:* |