{"id":"CVE-2025-25035","aliases":["EUVD-2025-7214","GHSA-6fxv-ffp4-g24h"],"status":"published","title":"Jalios JPlatform 10 Multiple Cross-Site Scripting (XSS)","description":"Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Jalios Workplace 6.2, Jalios Workplace 6.1, Jalios Workplace 6.0, and Jalios Workplace 5.3 to 5.5","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00392,"percentile":0.33634,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2025-03-21T19:02:39Z","modified":"2026-06-17T09:00:10Z","products":[{"vendor":"jalios","product":"jplatform"}],"references":[{"url":"https://community.jalios.com/jcms/jc1_893720/en/security-alert-2025-02-19"},{"url":"https://issues.jalios.com/browse/JCMS-11259"},{"url":"https://issues.jalios.com/browse/JCMS-11246"},{"url":"https://issues.jalios.com/browse/JCMS-11248"},{"url":"https://vulncheck.com/advisories/jalios-jplatform-xss"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25035"},{"url":"https://github.com/advisories/GHSA-6fxv-ffp4-g24h"}],"sources":{"cve":[{"id":"CVE-2025-25035","title":"Jalios JPlatform 10 Multiple Cross-Site Scripting (XSS)","description":"Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Jalios Workplace 6.2, Jalios Workplace 6.1, Jalios Workplace 6.0, and Jalios Workplace 5.3 to 5.5","status":"published","published":"2025-03-21T19:02:39.718Z","modified":"2025-11-19T20:26:02.084Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:32:31.631102Z"}],"euvd":[{"id":"EUVD-2025-7214","description":"Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Jalios Workplace 6.2, Jalios Workplace 6.1, Jalios Workplace 6.0, and Jalios Workplace 5.3 to 5.5","status":"published","published":"2025-03-21T19:02:39Z","modified":"2025-11-19T20:26:02Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T19:49:15.042838Z"}],"ghsa":[{"id":"GHSA-6fxv-ffp4-g24h","title":"Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in...","description":"Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Jalios Workplace 6.2, Jalios Workplace 6.1, Jalios Workplace 6.0, and Jalios Workplace 5.3 to 5.5","status":"published","published":"2025-03-21T21:31:38Z","modified":"2025-03-21T21:31:49Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:00:24.265228Z"}],"nvd":[{"id":"CVE-2025-25035","description":"Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Jalios Workplace 6.2, Jalios Workplace 6.1, Jalios Workplace 6.0, and Jalios Workplace 5.3 to 5.5","status":"published","published":"2025-03-21T19:15:45.437Z","modified":"2026-06-17T09:00:10.407Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:10:54.744127Z"}]}}