CVE-2025-65754: Algernon Project Algernon

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename.

Affected products

• Algernon Project Algernon: version 1.17.4 only

Published 2025-12-10. Last modified 2026-06-17.