CVE-2025-55574: Docmost

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in docmost v.0.21.0 and before allows an attacker to execute arbitrary code

Affected products

• Docmost Docmost: up to and including 0.21.0

Published 2025-08-25. Last modified 2026-06-17.