CVE-2025-22491CWE-79

Improper Input Validation in Foreseer Reporting Software (FRS)

Medium · published February 28, 2025

CVSS v3.1
6.7
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software (FRS) application which could lead into execution of arbitrary JavaScript in a browser context

for all the interacting users. This security issue has been patched in the latest version 1.5.100 of the FRS.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00194 · 8.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-02-28T08:24Z
EPSS history
Timeline
  • 28 FEB 08:24Z
    Improper Input Validation in Foreseer Reporting Software (FRS)
    cvelistv5