Skip to content
7.1 High

CVE-2025-23666 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cxc-sawa…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cxc-sawa Management-screen-droptiles cxc-sawa allows Reflected XSS.This issue affects Management-screen-droptiles: from n/a through <= 1.0.

Affected products and versions

Product Affected versions Fixed in
Management-screen-droptiles 1.0 earliest → 1.0 No fix stated
Management-screen-droptiles 1.0 earliest → 1.0 No fix stated
Track this CVE