Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint. This issue allows malicious scripts to be injected and executed persistently in the context of users accessing the affected resource.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-16 | 2 | Disclosure2 |
| 2026-03-10 | 1 | Disclosure1 |
CVE-2025-59904 Stored Cross-Site Scripting Vulnerability in Kubysoft kForms Application Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-59904
Post summary
The entry announces CVE‑2025‑59904 as a stored XSS flaw in Kubysoft kForms, with no additional info on exploitation, patches, or PoC.
CVE-2025-59904 Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint. This issue allows malicious… https://www.cve.org/CVERecord?id=CVE-2025-59904
Post summary
The post announces CVE-2025-59904, a stored XSS flaw in Kubysoft’s '/kForms/app' endpoint triggered via multiple parameters, without providing exploitation, patch, or PoC details.
🟠 Kubysoft, Stored XSS, #CVE-2025-59904 (MEDIUM) https://dailycve.com/kubysoft-stored-xss-cve-2025-59904-medium/
Post summary
The text announces the discovery of a stored XSS vulnerability in Kubysoft (CVE-2025-59904) and notes its medium severity, but does not provide evidence of exploitation, a PoC, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | kubysoft | kubysoft | - | - | - |