AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-1360

LOW · CVSS 3.5 EPSS 0.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-02-16 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 3.5. It may be remotely exploitable.

CVE
CVE-2025-1360
Severity
LOW
CVSS
3.5
EPSS
0.29%

Original NVD Description

A vulnerability, which was classified as problematic, was found in Internet Web Solutions Sublime CRM up to 20250207. Affected is an unknown function of the file /crm/inicio.php of the component HTTP POST Request Handler. The manipulation of the argument msg_to leads to cross site scripting. It is possible to launch the attack remotely. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.