Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A stored cross-site scripting (XSS) vulnerability exists in Kiamo before 8.4 due to improper output encoding of user-supplied input in administrative interfaces. An authenticated administrative user can inject arbitrary JavaScript code that is executed in the browser of users viewing the affected pages. NOTE: the Supplier's position is that a fix for this had already been released for the 8.3.1 branch before the CVE Record was published.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-70365 Stored Cross-Site Scripting in Kiamo Before 8.4 Administrative Interfaces https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-70365
Post summary
The entry cites a stored XSS vulnerability for Kiamo before version 8.4, but offers no proof‑of‑concept, exploit code, patch, or active exploitation evidence.
🚨*CVE* CVE-2025-70365 A stored cross-site scripting (XSS) vulnerability exists in Kiamo before 8.4 due to improper output encoding of user-supplied input in administrative interfaces. An a… https://www.cve.org/CVERecord?id=CVE-2025-70365 ----- Traducción: CVE-2025-70365 Exi… http://infoflow.cloud`
Post summary
The post announces CVE‑2025‑70365, a stored XSS vulnerability in Kiamo before version 8.4, but provides no evidence of active exploitation, PoC, or patch information.
CVE-2025-70365 A stored cross-site scripting (XSS) vulnerability exists in Kiamo before 8.4 due to improper output encoding of user-supplied input in administrative interfaces. An a… https://www.cve.org/CVERecord?id=CVE-2025-70365
Post summary
The text announces a stored XSS vulnerability (CVE-2025-70365) in Kiamo before version 8.4, providing technical details but no evidence of a PoC, exploit code, active exploitation, or patch.