Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Reflected XSS. The vulnerability could allow injecting malicious JavaScript inside URL parameters that was then rendered with the preview of the page, so that malicious scripts could be executed on the client side. This issue affects Web Site Management Server: 16.7.0, 16.7.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
🚨 CVE-2025-13672 ثغرة Reflected XSS تضرب OpenText WSM 16.7.0–16.7.1 بخطورة 7/10. يمكن استغلالها عبر حقن JavaScript في الرابط لتنفيذه داخل متصفح الضحية (سرقة جلسات / تنفيذ أوامر باسم المستخدم). التحديث فورًا للإصدار الآمن ضروري. #CyberSecurity #XSS #CVE #CYBER_MI https://t.co/gnmiE2dBXK
Post summary
The tweet announces a moderate‑severity XSS vulnerability in OpenText WSM 16.7.x and urges users to apply the available patch immediately.
CVE-2025-13672 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Reflected XSS… https://www.cve.org/CVERecord?id=CVE-2025-13672
Post summary
The text announces CVE-2025-13672, detailing a reflected XSS vulnerability in OpenText Web Site Management Server, but does not provide a PoC, exploit, patch, or active exploitation evidence.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opentext | web_site_management_server | 16.7.0 | - | - |
| App | opentext | web_site_management_server | 16.7.1 | - | - |