CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Java.
CVE
CVE-2025-71240
Severity
MEDIUM
CVSS
5.4
EPSS
0.17%
Java
Original NVD Description
SPIP before 4.2.15 allows Cross-Site Scripting (XSS) via crafted content in HTML code tags. The application does not properly verify JavaScript within code tags, allowing an attacker to inject malicious scripts that execute in a victim's browser.
Related CVEs
Other vulnerabilities affecting the same vendor(s)