Low severityNVD Advisory· Published May 21, 2025· Updated Jun 17, 2026

CVE-2025-1420

Description

Input provided in a field containing "activationMessage" in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.

This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Proget/Konsola Progetllm-fuzzy
Range: before 2.17.5

Patches

Vulnerability mechanics

References

cert.pl/en/posts/2025/05/CVE-2025-1415nvd
proget.pl/en/mobile-device-management/nvd

News mentions

No linked articles in our index yet.

cvss	0.065
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000