CVE-2025-55834: XSS
Published Sep 16, 2025
·Updated
A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logController.do component
Affected Software
2 affected components
Jeewms JeeWMS<=3.7
Huayi-tec Jeewms<=3.7
Event History
Sep 16, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-55834?
The severity of CVE-2025-55834 is classified as Medium, as it allows remote attackers to conduct Cross Site Scripting attacks.
2
How do I fix CVE-2025-55834?
To fix CVE-2025-55834, upgrade JeeWMS to version 3.8 or later, which includes patches for this vulnerability.
3
What systems are affected by CVE-2025-55834?
CVE-2025-55834 affects JeeWMS versions 3.7 and earlier.
4
What type of attack does CVE-2025-55834 enable?
CVE-2025-55834 enables a Cross Site Scripting (XSS) attack, allowing attackers to execute scripts in a user's browser.
5
How can I mitigate the risks associated with CVE-2025-55834?
To mitigate risks from CVE-2025-55834, ensure that user inputs are properly sanitized and validated before processing.