Cross-site Scripting Vulnerability in Digital Corporate Warehouse by DivvyDrive
CVE-2025-11962

7.3HIGH

Key Information:

Vendor

Divvydrive Information Technologies Inc.

Status
Digital Corporate Warehouse
Vendor
CVE Published:
12 November 2025

What is CVE-2025-11962?

A Cross-site Scripting (XSS) vulnerability exists in the Digital Corporate Warehouse developed by DivvyDrive, allowing malicious users to inject executable scripts into web pages. This issue results from improper handling of user inputs during web page generation, enabling stored XSS attacks that can compromise user data and lead to unauthorized actions on behalf of the user. Affected versions prior to 4.8.2.22 are at risk, emphasizing the need for user segregation and strict input validation to mitigate potential exploits.

Affected Version(s)

Digital Corporate Warehouse 0

References

https://www.usom.gov.tr/bildirim/tr-25-0393

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Hakan SONAY
.