VYPR

kForms

by Kubysoft

CVEs (1)

  • CVE-2025-59904Feb 16, 2026
    risk 0.00cvss epss 0.00

    Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint. This issue allows malicious scripts to be injected and executed persistently in the context of users accessing the affected resource.