CVE-2025-61549 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Cross-Site Scripting (XSS) is present on the LoginID parameter on the /PSP/app/web/reg/reg_display.asp endpoint in edu Business Solutions Print Shop Pro WebDesk…
Medium CVSS: 6.1

CVE-2025-61549

Cross-Site Scripting (XSS) is present on the LoginID parameter on the /PSP/app/web/reg/reg_display.asp endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 19.76). Unsanitized user input is reflected in HTTP responses without proper HTML encoding or escaping. This allows attackers to execute arbitrary JavaScript in the context of a victim s browser session
Vendor
Edubusinesssolutions
Product
Print Shop Pro Webdesk
CWE
CWE-79
Yayın Tarihi
2026-01-08 17:15:48
Güncelleme
2026-02-10 18:16:20
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Print Shop Pro Webdesk MEDIUM Edubusinesssolutions 2026

Referanslar

https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2025-61549 https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2025-61549