CVE-2025-22994

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-22994
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22994.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-22994
Published
2025-01-31T16:15:35.557Z
Modified
2026-04-10T05:22:48.111001Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.

References

Affected packages

Git / github.com/o2oa/o2oa

Affected ranges

Type
GIT
Repo
https://github.com/o2oa/o2oa
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4a1e76ae4fc148d6f242a3ef637c1fcecc505205
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.3"
        }
    ]
}

Affected versions

7.*
7.2.0
9.*
9.0.0
9.1
9.1.0
9.1.2
9.1.3
develop-7.*
develop-7.2
develop-7.3
develop-8.*
develop-8.1
develop-8.2
develop-9.*
develop-9.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22994.json"