Cross-site Scripting Vulnerability in Specto CM by Echo Call Center Services

CVE-2025-2154

What is CVE-2025-2154?

A cross-site scripting (XSS) vulnerability exists in Specto CM by Echo Call Center Services, allowing for stored XSS attacks. This flaw occurs due to improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. Exploiting this vulnerability could lead to unauthorized actions performed on behalf of users, compromising the integrity and confidentiality of the affected web application. Users are advised to upgrade to versions released after 17032025 to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References