High severity7.3NVD Advisory· Published Mar 21, 2025· Updated Jun 17, 2026

CVE-2025-25035

Description

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Jalios Workplace 6.2, Jalios Workplace 6.1, Jalios Workplace 6.0, and Jalios Workplace 5.3 to 5.5

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jalios/Workplacellm-create
Range: 6.2, 6.1, 6.0, 5.3 to 5.5
Jalios/JPlatformllm-fuzzy
Range: <10.0.8, <10.0.7, <10.0.6

Patches

Vulnerability mechanics

References

community.jalios.com/jcms/jc1_893720/en/security-alert-2025-02-19nvd
issues.jalios.com/browse/JCMS-11246nvd
issues.jalios.com/browse/JCMS-11248nvd
issues.jalios.com/browse/JCMS-11259nvd
vulncheck.com/advisories/jalios-jplatform-xssnvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000