CVE-2025-59905: Kubysoft

Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’. This flaw allows the injection of arbitrary client-side scripts, which are immediately reflected in the HTTP response and executed in the victim's browser.

Affected products

• Kubysoft Kubysoft: affected versions not specified

Published 2026-02-16. Last modified 2026-06-17.