{"id":"CVE-2025-52344","aliases":["EUVD-2025-29211","GHSA-cgcx-37wj-87f8"],"status":"published","title":"Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2...","description":"Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00327,"percentile":0.26183,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2025-09-15T00:00:00Z","modified":"2026-11-05T23:10:00Z","products":[{"vendor":"explorance","product":"blue"}],"references":[{"url":"https://www.explorance.com/products/blue","tags":["Product"]},{"url":"https://gist.github.com/SaraAlsaif/f363b307f29c865d499678eca3106b43","tags":["Exploit","Mitigation","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52344"},{"url":"https://github.com/advisories/GHSA-cgcx-37wj-87f8"}],"sources":{"cve":[{"id":"CVE-2025-52344","description":"Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.","status":"published","published":"2025-09-15T00:00:00Z","modified":"2025-09-15T17:50:40.868Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:32:31.309974Z"}],"euvd":[{"id":"EUVD-2025-29211","description":"Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.","status":"published","published":"2025-09-15T00:00:00Z","modified":"2025-09-15T17:50:40Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:31:43.516497Z"}],"ghsa":[{"id":"GHSA-cgcx-37wj-87f8","title":"Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2...","description":"Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.","status":"published","published":"2025-09-15T18:31:06Z","modified":"2025-09-15T18:31:12Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:03:37.061484Z"}],"nvd":[{"id":"CVE-2025-52344","description":"Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.","status":"published","published":"2025-09-15T18:15:38.883Z","modified":"2026-11-05T23:10:00.15Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-06T01:57:37.498693Z"}]}}