Cross-site Scripting Vulnerability in Specto CM by Echo Call Center Services
CVE-2025-2154
5.4MEDIUM
Key Information:
- Status
- Vendor
- CVE Published:
- 24 December 2025
What is CVE-2025-2154?
A cross-site scripting (XSS) vulnerability exists in Specto CM by Echo Call Center Services, allowing for stored XSS attacks. This flaw occurs due to improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. Exploiting this vulnerability could lead to unauthorized actions performed on behalf of users, compromising the integrity and confidentiality of the affected web application. Users are advised to upgrade to versions released after 17032025 to mitigate this risk.
Affected Version(s)
Specto CM 0 < 17032025