5.4
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Description
IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Basic Information
ID
CVE-2025-36121
Source
ibm
Published
Oct 27, 2025 at 14:56
Modified
Oct 27, 2025 at 18:51
Affected Product
Vendor
IBM
Product
OpenPages
Version
9.1
Affected Versions
IBM OpenPages 9.1
IBM OpenPages 9.0
IBM OpenPages 9.0