Skip to content
Sign in
6.5 Medium

CVE-2025-64365 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colabrio Ohio…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colabrio Ohio Extra ohio-extra allows DOM-Based XSS.This issue affects Ohio Extra: from n/a through <= 3.6.0.

Affected products and versions

Product Affected versions Fixed in
Ohio Extra 3.6 earliest → 3.6.0 No fix stated

Other CVEs of Ohio Extra

The 3 CVEs of Ohio Extra →
CVE-2026-32571 Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions 6.5 Medium CVE-2025-26924 Improper Control of Generation of Code ('Code Injection') vulnerability in colabrio Ohio Extra ohio-extra allows Code… 6.5 Medium
Track this CVE