CVE-2025-24833: Neojapan Inc Desknet's Neo

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser.

Affected products

• Neojapan Inc Desknet's Neo

Published 2025-10-16. Last modified 2026-10-09.