JavaScript Injection Vulnerability in OPEXUS FOIAXpress

CVE-2025-61998

What is CVE-2025-61998?

A JavaScript injection vulnerability exists in OPEXUS FOIAXpress prior to version 11.13.3.0, where an administrative user can insert malicious JavaScript or other content as a URL through the Technical Support Hyperlink Manager. When other users click on the malicious link, the injected content is executed in their context. This loophole allows the administrative user to perform actions impersonating the target user, potentially leading to the theft of session cookies, user credentials, or other sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References