XSS in Fpt Software Nightwolf Penetration Platform
CVE-2025-31165
Cross-Site Scripting (XSS) vulnerability in the Logbug module of NightWolf Penetration Testing Platform 1.2.2 allows attackers to execute JavaScript through the markdown editor feature.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (25.7th percentile) — read the EPSS interpretation.
Affected products
- Fpt Software Nightwolf Penetration Platform — versions 1.2.2, 1.2.3