> CVE-2025-65640

« BACK_TO_HOME
PUBLISHED
2026-06-04 19:16
MODIFIED
2026-06-04 19:16
EPSS (Prob. Exploit)
0.22%
Top 88.0%
DATA SOURCES:
NVD 🔗 2026-06-04 FIRST EPSS 🔗 2026-11-01

> DESCRIPTION

Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text fields when creating a new document. Specifically, when an authenticated attacker submits data containing JavaScript code within these fields, the application fails to properly sanitize or escape the content. As a result, the injected script is executed when the page is rendered, allowing the attacker to execute arbitrary JavaScript in the context of other users' browsers who view the affected page.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
04/06/2026 19:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 5 months ago

> REFERENCES

https://github.com/vincenzo-emanuele/CVE-2025-65640
https://www.arket.it/
« BACK_TO_HOME