CVE Catalog
CVE-2025-63082
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.36%
28th percentile - higher than 28% of all known CVEs
Summary
Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.
Risk Assessment
The XSS vulnerability could allow an attacker to inject malicious scripts via images, potentially leading to data theft or session hijacking.
Recommendation
It is recommended to update the software to a version that includes the input filtering fix for data URLs in img tags.
Other vulnerabilities in HTML filter
Original NVD description (English source)
Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS