CVE-2025-8276CWE-116CWE-74CWE-79

HTML Injection in Patika Global Technologies' HumanSuite

Medium · published September 16, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Patika Global Technologies HumanSuite allows Cross-Site Scripting (XSS), Phishing.

This issue affects HumanSuite: before 53.21.0.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00339 · 26.1th percentile
Weaknesses
CWE-116 · Improper Encoding or Escaping of Output; CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'); CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-09-16T14:00Z
EPSS history
Timeline
  • 16 SEP 14:00Z
    HTML Injection in Patika Global Technologies' HumanSuite
    cvelistv5