CVE-2025-54346

High · 7.6

CVSS

7.6

EPSS

0.3%

Published

Nov 14, 2025

CISA due date

—

The record

A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information.

Affected packages

Ecosystem	Package	Introduced	Fixed