Stored Cross-Site Scripting Vulnerability in ADM File Explorer and Text Editor

CVE-2025-7618

What is CVE-2025-7618?

A stored Cross-Site Scripting (XSS) vulnerability in the File Explorer and Text Editor of ADM allows attackers to inject malicious scripts. This can lead to unauthorized access to sensitive information, such as cookies and other data stored in the browser, used in conjunction with the affected applications. Users of ADM versions ranging from 4.1.0 to 4.3.3.RH61, as well as ADM 5.0.0.RIN1 and earlier, along with Text Editor 1.0.0.r112 and earlier, are at risk and should take immediate action to protect their systems.

References