Cross-Site Scripting Vulnerability in OpenText Web Site Management Server

CVE-2025-13672

What is CVE-2025-13672?

A Cross-Site Scripting (XSS) vulnerability has been identified in OpenText™ Web Site Management Server, which allows attackers to inject malicious JavaScript through URL parameters. This threat emerges when the server fails to properly neutralize inputs during the generation of web pages. As a result, when users preview a page, these scripts can be executed on the client side, potentially compromising user data and security. This vulnerability specifically impacts versions 16.7.0 and 16.7.1, making it crucial for users to apply necessary security updates.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References