CVE-2025-27921: XSS
A reflected cross-site scripting (XSS) vulnerability was discovered in Output Messenger before 2.0.63, where unsanitized input could be injected into the web application’s response. This vulnerability occurs when user-controlled input is reflected back into the browser without proper sanitization or encoding.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27921?
CVE-2025-27921 has a high severity due to its potential for reflected cross-site scripting attacks.
How do I fix CVE-2025-27921?
To fix CVE-2025-27921, upgrade Output Messenger to version 2.0.63 or later.
What causes CVE-2025-27921?
CVE-2025-27921 is caused by unsanitized user input being reflected back into web application responses.
Who is affected by CVE-2025-27921?
CVE-2025-27921 affects users of Output Messenger versions prior to 2.0.63.
What impacts can CVE-2025-27921 have on users?
CVE-2025-27921 can lead to the execution of arbitrary scripts in a user's browser, compromising their security.