VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Sep 22, 2025· Updated Jul 5, 2026

CVE-2025-55887

CVE-2025-55887

Description

Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the transactionID GET parameter on the transaction confirmation page. Due to improper input validation and output encoding, an attacker can inject malicious JavaScript code that is executed in the context of a user s browser. This can lead to session hijacking, theft of cookies, and other malicious actions performed on behalf of the victim.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • ARD/ARDllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)
  • ARD/Gec En Ligne
    cpe:2.3:a:ard:gec_en_ligne:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.