CVE-2025-54348

Medium · 6.5

CVSS

6.5

EPSS

0.2%

Published

Nov 14, 2025

CISA due date

—

The record

A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information.

Affected packages

Ecosystem	Package	Introduced	Fixed