High severity7.1NVD Advisory· Published Nov 6, 2025· Updated Apr 15, 2026
CVE-2025-64232
CVE-2025-64232
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icopydoc Import from YML import-from-yml allows Reflected XSS.This issue affects Import from YML: from n/a through <= 3.1.17.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=3.1.17+ 1 more
- (no CPE)range: <=3.1.17
- (no CPE)range: <=3.1.17
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.