Unrated severityNVD Advisory· Published Sep 22, 2025· Updated Sep 24, 2025
CVE-2025-55887
CVE-2025-55887
Description
Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the transactionID GET parameter on the transaction confirmation page. Due to improper input validation and output encoding, an attacker can inject malicious JavaScript code that is executed in the context of a user s browser. This can lead to session hijacking, theft of cookies, and other malicious actions performed on behalf of the victim.
Affected products
1- ARD/ARDdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- alpes.commitre
- ard.commitre
- services.ard.fr/index.phpmitre
News mentions
0No linked articles in our index yet.