Unrated severityNVD Advisory· Published Sep 22, 2025· Updated Sep 24, 2025
CVE-2025-55887
CVE-2025-55887
Description
Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the transactionID GET parameter on the transaction confirmation page. Due to improper input validation and output encoding, an attacker can inject malicious JavaScript code that is executed in the context of a user s browser. This can lead to session hijacking, theft of cookies, and other malicious actions performed on behalf of the victim.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- ARD/ARDdescription
Patches
Vulnerability mechanics
References
3- alpes.commitre
- ard.commitre
- services.ard.fr/index.phpmitre
News mentions
0No linked articles in our index yet.