Cross-Site Scripting Vulnerability in Ubit Information Technologies STOYS

CVE-2025-2404

What is CVE-2025-2404?

A Cross-Site Scripting (XSS) vulnerability exists in Ubit Information Technologies' STOYS platform, impacting versions from 2 through 20250916. This security flaw arises from improper neutralization of user-input during web page generation, enabling attackers to inject malicious scripts. Exploiting this vulnerability could lead to unauthorized access and manipulation of user sessions. Given the critical nature of this flaw, users of the affected versions are advised to take immediate action to secure their systems and monitor for updates from the vendor regarding fixes.

References