> CVE-2025-2495

« BACK_TO_HOME
PUBLISHED
2025-03-18 12:15
MODIFIED
2025-03-18 12:15
EPSS (Prob. Exploit)
0.23%
Top 85.7%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-11

> DESCRIPTION

Stored Cross-Site Scripting (XSS) in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to upload XML files to the server with JavaScript code injected via the ‘/softdial/scheduler/save.php’ resource. The injected code will execute when the uploaded file is loaded via the ‘/softdial/scheduler/load.php’ resource and can redirect the victim to malicious sites or steal their login information to spoof their identity.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-qwp8-x4ff-5h87 MODERATE

ZX Allows Environment Variable Injection for dotenv API

AFFECTED PACKAGES:
NPM / zx
= 8.3.1
Fixed in: 8.3.2

> HISTORIQUE DES MODIFICATIONS

Première apparition
18/03/2025 12:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:01
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME