CVE-2025-3189

UNKNOWN · CVSS N/A EPSS 0.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-04-04 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. It affects Java.

CVE

CVE-2025-3189

Severity

UNKNOWN

CVSS

N/A

EPSS

0.37%

Java

Original NVD Description

Stored Cross-Site Scripting (XSS) in DoWISP in versions prior to 1.16.2.50, which consists of an stored XSS through the upload of a profile picture in SVG format with malicious Javascript code in it.