Cloudanix VulnDB

CVE-2025-65640

Medium · 6.3

CVSS

6.3

EPSS

0.2%

Published

Jun 4, 2026

CISA due date

—

The record

Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text fields when creating a new document. Specifically, when an authenticated attacker submits data containing JavaScript code within these fields, the application fails to properly sanitize or escape the content. As a result, the injected script is executed when the page is rendered, allowing the attacker to execute arbitrary JavaScript in the context of other users' browsers who view the affected page.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities