Skip to content
Sign in
6.1 Medium

CVE-2025-27633 The TRMTracker web application is vulnerable to reflected Cross-site scripting attack

Description

The TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The application allows client-side code injection that might be used to compromise the confidentiality and integrity of the system.

Affected products and versions

Product Affected versions Fixed in
TRMTracker 6.3 6.3 → 6.3.01 No fix stated
TRMTracker 6.2 6.2 → 6.2.04 No fix stated

Other CVEs of TRMTracker

The 3 CVEs of TRMTracker →
CVE-2025-27631 The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code… 6.5 Medium CVE-2025-27632 A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value… 6.1 Medium
Track this CVE