CVE-2025-47201

In Intrexx Portal Server before 12.0.4, multiple Velocity-Scripts are susceptible to the execution of unrequested JavaScript code in HTML, aka XSS.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - cve@mitre.org

Published

2025-05-02

Last modified

2025-05-02

Weaknesses

CWE-79

Affected products

• Intrexx (Intrexx)
• Portal Server (Intrexx)

References

• https://security.intrexx.com/en/security-advisories/ixsa-20250429-01/