Unrated severityNVD Advisory· Published Nov 21, 2025· Updated Nov 21, 2025

CVE-2025-61949

Description

LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page.

Affected products

LogStare/Collectorllm-fuzzy
LogStare Inc./LogStare Collector (for Linux)v5
Range: 2.4.1 and earlier
LogStare Inc./LogStare Collector (for Windows)v5
Range: 2.4.1 and earlier

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

jvn.jp/en/jp/JVN77560819/mitre
www.logstare.com/vulnerability/2025-001/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000