CVE-2025-55126
Medium · 6.5CVSS
6.5
EPSS
0.2%
Published
Nov 20, 2025
CISA due date
—
The record
HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advertiser-related pages, with campaign names being the vector for the stored XSS
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|