XSS in M-Files Corporation Admin

CVE-2025-2159

Stored XSS in Desktop UI in M-Files Server Admin tool before version 25.3.14681.7 on Windows allows authenticated local user to run scripts via UI

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (11.9th percentile) — read the EPSS interpretation.