CVE-2025-8661: Stored Cross-Site Scripting in Symantec PGP Encryption 11.0.1
A stored Cross-Site Scripting vulnerability (XSS) occurs when the server does not properly validate or encode the data entered by the user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8661?
The severity of CVE-2025-8661 is classified as critical due to its potential to allow attackers to execute malicious scripts in the context of an affected user's browser.
How do I fix CVE-2025-8661?
To fix CVE-2025-8661, ensure that proper validation and encoding of user input is implemented in all data processing and output functionalities.
Which versions of Symantec PGP Encryption are affected by CVE-2025-8661?
CVE-2025-8661 affects all versions of Symantec PGP Encryption that do not correctly validate user inputs.
What is a stored Cross-Site Scripting vulnerability as described in CVE-2025-8661?
A stored Cross-Site Scripting vulnerability like CVE-2025-8661 allows an attacker to inject malicious scripts that get stored on the server and executed when other users retrieve the affected data.
What impact can CVE-2025-8661 have on users?
CVE-2025-8661 can lead to unauthorized actions being performed in a user's session, potentially compromising sensitive information or allowing account takeover.