CVE-2025-13873: Objectplanet Opinio

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject arbitrary JavaScript code, which executes in the browsing context of any visitor accessing the compromised survey.

Affected products

• Objectplanet Opinio: version 7.26 only

Published 2025-12-02. Last modified 2026-09-03.