CVE-2025-52204

MEDIUM NVD

CVSS Score 6.1

Severity MEDIUM

Published Mar 23, 2026

Vendor unknown

Description

A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter