VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Dec 2, 2025· Updated Sep 3, 2026

CVE-2025-13873

CVE-2025-13873

Description

Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject arbitrary JavaScript code, which executes in the browsing context of any visitor accessing the compromised survey.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Objectplanet/Opinio3 versions
    cpe:2.3:a:objectplanet:opinio:7.26:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:objectplanet:opinio:7.26:*:*:*:*:*:*:*
    • (no CPE)range: = 7.26 rev12562
    • (no CPE)range: 7.26 rev12562

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.