CVE-2025-52204: XSS
Published Mar 23, 2026
·Updated
A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter
Affected Software
1 affected component
Znuny Znuny::ITSM>=6.5.0<=6.5.x
Event History
Mar 23, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-52204?
CVE-2025-52204 has a medium severity rating of 6.1 according to the CVSS v3.1 system.
2
How do I fix CVE-2025-52204?
To fix CVE-2025-52204, users should upgrade to the latest version of Znuny::ITSM that addresses this XSS vulnerability.
3
What kind of vulnerability is CVE-2025-52204?
CVE-2025-52204 is classified as a Cross-Site Scripting (XSS) vulnerability.
4
Which endpoint is affected by CVE-2025-52204?
The customer.pl endpoint is affected by CVE-2025-52204 through the OTRSCustomerInterface parameter.
5
What software is impacted by CVE-2025-52204?
CVE-2025-52204 impacts Znuny::ITSM versions 6.5.x.