Cross-Site Scripting Vulnerability in BlueSpice by Hallo Welt! GmbH
CVE-2025-58114

5.9MEDIUM

Key Information:

Vendor

Hallo Welt! Gmbh

Status
Bluespice
Vendor
CVE Published:
19 September 2025

What is CVE-2025-58114?

An improper input validation vulnerability exists in the CognitiveProcessDesigner extension of BlueSpice by Hallo Welt! GmbH, potentially allowing attackers to inject malicious scripts into web pages accessed by users. This flaw affects BlueSpice versions 5.0 through 5.1.1, posing a risk to data integrity and user security. Proper validation mechanisms should be implemented to mitigate such vulnerabilities.

Affected Version(s)

BlueSpice 5 <= 5.1.1

References

https://en.wiki.bluespice.com/wiki/Security:Security_Advi...

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-58114 : Cross-Site Scripting Vulnerability in BlueSpice by Hallo Welt! GmbH