CVE-2025-1798: Italia Design Comuni Italia

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks.

Affected products

• Italia Design Comuni Italia: before 1.1.2 (fixed in 1.1.2)

Published 2025-03-25. Last modified 2026-06-17.