CVE-2025-56451: XSS
Cross site scripting vulnerability in seeyon Zhiyuan A8+ Collaborative Management Software 7.0 via the topValue parameter to the seeyon/main.do endpoint.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-56451?
CVE-2025-56451 is classified as a medium severity cross site scripting vulnerability.
How do I fix CVE-2025-56451?
To mitigate CVE-2025-56451, ensure that input validation and output encoding are implemented for the topValue parameter in the seeyon/main.do endpoint.
What software is affected by CVE-2025-56451?
CVE-2025-56451 affects Seeyon Zhiyuan A8+ Collaborative Management Software version 7.0.
How can I check if I am vulnerable to CVE-2025-56451?
You can test your application by sending crafted requests to the seeyon/main.do endpoint to see if it reflects unsanitized input back to the user.
What impact can CVE-2025-56451 have on my application?
CVE-2025-56451 can allow an attacker to execute arbitrary JavaScript in the context of a user's browser, potentially leading to data theft or session hijacking.