A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_orderopt.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Mon, 11 May 2026 17:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Reflected Cross‑Site Scripting in docuForm Menu Order Component | |
| Weaknesses | CWE-79 |
Mon, 11 May 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_orderopt.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-05-11T14:49:49.566Z
Reserved: 2025-09-26T00:00:00.000Z
Link: CVE-2025-61314
No data.
Status : Received
Published: 2026-05-11T16:17:28.743
Modified: 2026-05-11T16:17:28.743
Link: CVE-2025-61314
No data.
OpenCVE Enrichment
Updated: 2026-05-11T16:45:15Z
Weaknesses
No weakness.