{"id":"CVE-2025-11682","aliases":["EUVD-2025-36121","GHSA-qxmp-vwjw-x542"],"status":"published","title":"Stored Cross-Site Scripting in Perx Customer Engagement \u0026 Loyalty Platform","description":"Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer Engagement \u0026 Loyalty Platform allows an authenticated attacker to execute arbitrary JavaScript code in a victim's browser. The vulnerability is due to improper sanitization of SVG file uploads. An attacker can upload a malicious SVG file containing a script payload to a campaign. When another user views this image on the public LMT microsite, the script executes, which can lead to session hijacking, data theft, or other unauthorized actions.This issue affects Customer Engagement \u0026 Loyalty Platform before 4.617.4.","severity":{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00188,"percentile":0.08404,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79","CWE-83"],"published":"2025-10-27T07:39:54Z","modified":"2026-10-08T11:10:00Z","products":[{"vendor":"perx technologies","product":"customer engagement \u0026 loyalty platform"}],"references":[{"url":"https://www.redguard.ch/blog/2025/10/27/advisory-perx-lmt-dashboard/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11682"},{"url":"https://www.redguard.ch/blog/2025/10/27/advisory-perx-lmt-dashboard"},{"url":"https://github.com/advisories/GHSA-qxmp-vwjw-x542"}],"sources":{"cve":[{"id":"CVE-2025-11682","title":"Stored Cross-Site Scripting in Perx Customer Engagement \u0026 Loyalty Platform","description":"Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer Engagement \u0026 Loyalty Platform allows an authenticated attacker to execute arbitrary JavaScript code in a victim's browser. The vulnerability is due to improper sanitization of SVG file uploads. An attacker can upload a malicious SVG file containing a script payload to a campaign. When another user views this image on the public LMT microsite, the script executes, which can lead to session hijacking, data theft, or other unauthorized actions.This issue affects Customer Engagement \u0026 Loyalty Platform before 4.617.4.","status":"published","published":"2025-10-27T07:39:54.263Z","modified":"2025-10-27T17:25:18.43Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:L","level":"high","assessor":"cna"}],"cwes":["CWE-79","CWE-83"],"updated_at":"2026-11-02T14:32:51.199669Z"}],"euvd":[{"id":"EUVD-2025-36121","description":"Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer Engagement \u0026 Loyalty Platform allows an authenticated attacker to execute arbitrary JavaScript code in a victim's browser. The vulnerability is due to improper sanitization of SVG file uploads. An attacker can upload a malicious SVG file containing a script payload to a campaign. When another user views this image on the public LMT microsite, the script executes, which can lead to session hijacking, data theft, or other unauthorized actions.This issue affects Customer Engagement \u0026 Loyalty Platform before 4.617.4.","status":"published","published":"2025-10-27T07:39:54Z","modified":"2025-10-27T17:25:18Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:L","level":"high"}],"updated_at":"2026-11-02T19:49:37.392201Z"}],"ghsa":[{"id":"GHSA-qxmp-vwjw-x542","title":"Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer...","description":"Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer Engagement \u0026 Loyalty Platform allows an authenticated attacker to execute arbitrary JavaScript code in a victim's browser. The vulnerability is due to improper sanitization of SVG file uploads. An attacker can upload a malicious SVG file containing a script payload to a campaign. When another user views this image on the public LMT microsite, the script executes, which can lead to session hijacking, data theft, or other unauthorized actions.This issue affects Customer Engagement \u0026 Loyalty Platform before 4.617.4.","status":"published","published":"2025-10-27T09:30:16Z","modified":"2025-10-27T09:30:27Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:04:13.243027Z"}],"nvd":[{"id":"CVE-2025-11682","description":"Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer Engagement \u0026 Loyalty Platform allows an authenticated attacker to execute arbitrary JavaScript code in a victim's browser. The vulnerability is due to improper sanitization of SVG file uploads. An attacker can upload a malicious SVG file containing a script payload to a campaign. When another user views this image on the public LMT microsite, the script executes, which can lead to session hijacking, data theft, or other unauthorized actions.This issue affects Customer Engagement \u0026 Loyalty Platform before 4.617.4.","status":"published","published":"2025-10-27T08:15:36.22Z","modified":"2026-10-08T11:10:00.25Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-79","CWE-83"],"updated_at":"2026-11-02T14:11:40.754193Z"}]}}