Reflected Cross-Site Scripting Vulnerability in Anapi Group's h6web

CVE-2025-1271

What is CVE-2025-1271?

A reflected Cross-Site Scripting (XSS) vulnerability exists in Anapi Group's h6web, enabling attackers to craft malicious URLs that can execute harmful JavaScript in the browser of unsuspecting users. This flaw can lead to the compromise of sensitive information, unauthorized actions on behalf of users, or even identity theft. When users click on the tainted link, their browsers unwittingly execute the injected scripts, posing a significant risk to both individual users and organizations relying on this web application.

References