CVE-2025-2160: Pega Platform

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup

Affected products

• Pega Pega Platform: from 8.4.3, before 8.5.5 (fixed in 8.5.5); from 23.1.0, before 23.1.4 (fixed in 23.1.4); from 24.1.0, before 24.1.2 (fixed in 24.1.2); version 24.2.0 only

Published 2025-04-14. Last modified 2026-06-17.