CVE-2025-1076

Published: 2025-02-06T14:15Z

Last Modified: 2025-02-06T14:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A Stored Cross-Site Scripting (Stored XSS) vulnerability has been found in the Holded application. This vulnerability could allow an attacker to store a JavaScript payload within the editable ‘name’ and ‘icon’ parameters of the Activities functionality. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt