Medium severity4.7NVD Advisory· Published Sep 3, 2025· Updated Jun 6, 2026

CVE-2025-0878

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft LimonDesk allows Cross-Site Scripting (XSS).

This issue affects LimonDesk: from s1.02.14 before v1.02.17.

Affected products

Akinsoft/LimonDeskllm-fuzzy
Range: s1.02.14 to <v1.02.17

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0206nvd
www.usom.gov.tr/bildirim/tr-25-0206nvd

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000