CVE-2025-54346

A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information.

Score

CVSS 3.1 7.6 High

Status

Analyzed - cve@mitre.org

Published

2025-11-14

Last modified

2025-11-14

Weaknesses

CWE-80

Affected products

• Pingalert Application Server (Desktopalert)

References

• https://desktopalert.net
• https://desktopalert.net/cve-2025-54346/