CVE-2025-13183Patch

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hotech Software Inc. Otello allows Stored XSS. This issue affects Otello: from 2.4.0 before 2.4.4.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-05: 1Patch / Workaround · 2026-06-05: 1Technical Details · 2026-06-05: 106-05
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH Severity Alert CVE-2025-13183 | CVSS 7.3 Stored XSS in Hotech Software Otello (v2.4.0 - 2.4.3) Impact: High confidentiality & integrity risk Fix: Update to v2.4.4+ #CVE #Vulnerability #PatchNow https://t.co/u0AMz0Df9A

    Post summary

    The tweet announces a Stored XSS vulnerability in Hotech Software Otello, gives a CVSS score and affected versions, and recommends updating to v2.4.4+ to remediate it, but contains no POC or exploitation details.

    0000031
    39 followersView on X

Explore more