XSS in Sicommnet Basec

CVE-2025-22373

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and alternation of CSS Styles This issue affects BASEC: from 14 Dec 2021.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (36.6th percentile) — read the EPSS interpretation.