CVE-2025-66359
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
An issue was discovered in Logpoint before 7.7.0 where insufficient input validation and lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability.
Risk Assessment
An attacker could inject a malicious script that executes in a Logpoint user's browser, potentially leading to session theft or actions on behalf of the victim.
Recommendation
Update Logpoint to version 7.7.0 or later.
Other vulnerabilities in Logpoint
See all- CVE-2025-66361Medium
An issue was discovered in Logpoint before 7.7.0. Sensitive information is exposed in System Processes for an extended period during high CPU load.
- CVE-2025-66360High
An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.
Original NVD description (English source)
An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS