Zucchetti Ad Hoc Infinity vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Zucchetti Ad Hoc Infinity: 1 record(s), with affected versions and fixes.
cpe:2.3:a:zucchetti:ad_hoc_infinity

CVE-2025-52180 Medium · 6.1 CWE-79 Oct 30, 2025

Cross-site Scripting (XSS) in Zucchetti Ad Hoc Infinity

Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthenticated attackers to inject arbitrary JavaScript via the pHtmlSource parameter of the /ahi/jsp/gsfr_feditorHTML.jsp?pHtmlSource endpoint.