Compassplustechnologies vulnerabilities
Published CVEs affecting Compassplustechnologies products: 1 record(s), with severity, exploitation and fixes.
CVE-2025-66574
Medium · 5.4
CWE-79 Dec 4, 2025
TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS)
TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing attackers to steal session cookies and potentially escalate privileges.