5.3Medium
CVE-2025-15591Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management
Description
Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums web page.
Weakness (CWE):
CWE-79
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| OpenText | Content Management | 20.3 – ≤ 25.2 |