Medium severity6.1NVD Advisory· Published May 5, 2025· Updated Jun 17, 2026
CVE-2025-27921
CVE-2025-27921
Description
A reflected cross-site scripting (XSS) vulnerability was discovered in Output Messenger before 2.0.63, where unsanitized input could be injected into the web application’s response. This vulnerability occurs when user-controlled input is reflected back into the browser without proper sanitization or encoding.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Output Messenger/Output Messengerdescription
- Range: <2.0.63
Patches
Vulnerability mechanics
References
2- www.outputmessenger.com/cve-2025-27921/nvdVendor Advisory
- www.srimax.com/products-2/output-messenger/nvdProduct
News mentions
0No linked articles in our index yet.