Improper input validation in Sparx Systems Pro Cloud Server

CVE-2025-4376

Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site Scripting (XSS). This issue affects Pro Cloud Server: earlier than 6.0.165.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.006 (43.2th percentile) — read the EPSS interpretation.