Cross-site Scripting Vulnerability in 金数据 by iamroody

CVE-2025-58864

What is CVE-2025-58864?

The 金数据 product from iamroody is impacted by a vulnerability that allows for stored Cross-site Scripting (XSS). This occurs due to improper neutralization of input during web page generation, enabling attackers to inject malicious scripts. The vulnerability specifically affects versions from when it was launched up to 1.0, posing a security risk that could impact user data security and integrity. Organizations using 金数据 should assess their systems for this issue and implement necessary security measures to mitigate potential risks.

References