Skip to content
Sign in
7.1 High

CVE-2025-49247 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmoreira Team…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmoreira Team Showcase team-showcase-cm allows DOM-Based XSS.This issue affects Team Showcase: from n/a through < 25.05.13.

Affected products and versions

Product Affected versions Fixed in
Team Showcase 25.05 earliest → 25.05.13 No fix stated

Other CVEs of Team Showcase

The 3 CVEs of Team Showcase →
CVE-2025-49250 Improper Control of Generation of Code ('Code Injection') vulnerability in cmoreira Team Showcase team-showcase-cm… 4.3 Medium CVE-2025-49248 Missing Authorization vulnerability in cmoreira Team Showcase team-showcase-cm allows Exploiting Incorrectly… 4.3 Medium
Track this CVE