CVE-2025-70365
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Apr 09, 2026
Vendor
unknown
Description
A stored cross-site scripting (XSS) vulnerability exists in Kiamo before 8.4 due to improper output encoding of user-supplied input in administrative interfaces. An authenticated administrative user can inject arbitrary JavaScript code that is executed in the browser of users viewing the affected pages.