CVE-2025-56252: Pathinfotech Servitiumcrm

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross Site Scripting (xss) vulnerability in ServitiumCRM 2.10 allowing attackers to execute arbitrary code via a crafted URL to the mobile parameter.

Affected products

• Pathinfotech Servitiumcrm: version 2.10 only

Published 2025-09-15. Last modified 2026-06-17.