CVE-2025-60948: Csprousers Csweb

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious javascript that executes in a victim's browser. Fixed in 8.1.0 alpha.

Affected products

• Csprousers Csweb: version 8.0.1 only

Published 2026-03-23. Last modified 2026-06-17.