Cross-Site Scripting Vulnerability in Aidango by Verisay Communication and Information Technology Industry and Trade Ltd. Co.

CVE-2025-2307

What is CVE-2025-2307?

A Cross-Site Scripting (XSS) vulnerability exists in the Aidango software provided by Verisay Communication and Information Technology Industry and Trade Ltd. Co. This flaw allows attackers to inject malicious scripts into web pages viewed by users, potentially leading to unauthorized actions or data exposure. The issue impacts versions of Aidango prior to 2.144.4, making it crucial for users to update their software to protect against potential exploitation. Attackers can exploit this vulnerability to manipulate web content and deceive users.

References