Medium severity6.1NVD Advisory· Published Oct 24, 2025· Updated Jun 17, 2026

CVE-2025-60936

Description

Emoncms 11.7.3 is vulnerable to Cross Site in the input handling mechanism. This vulnerability allows authenticated attackers with API access to inject malicious JavaScript code that executes when administrators view the application logs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Openenergymonitor/Emoncms
cpe:2.3:a:openenergymonitor:emoncms:11.7.3:*:*:*:*:*:*:*
Emoncms/Emoncmsdescription
Emoncms/emoncmsllm-fuzzy
Range: <11.7.3

Patches

Vulnerability mechanics

References

github.com/emoncms/emoncms/issues/1940nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000