CVE-2025-66939
Medium · 5.4CVSS
5.4
EPSS
0.3%
Published
Jan 12, 2026
CISA due date
—
The record
Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execute arbitrary code via a crafted favicon file
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|