Medium severity · published Sep 15, 2025
CVE-2025-52344
Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the…
6.1
CVSS
0.3%
EPSS
No
On KEV
Description
Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BL
Blue · Explorance
8.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-52344
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-52344
Exploit
https://gist.github.com/SaraAlsaif/f363b307f29c865d499678eca3106b43
Product
https://www.explorance.com/products/blue
More from Blue
10.0
CVE-2025-57792
SQL Injection Vulnerability in Explorance Blue
9.9
CVE-2025-57795
Unauthenticated Remote File Download in Explorance Blue
9.1
CVE-2025-57794
Unrestricted File Upload Vulnerability in Explorance Blue
8.6
CVE-2025-57793
SQL Injection Vulnerability in Explorance Blue
6.8
CVE-2025-57796
Use of a hardcoded static key to protect sensitive data in Explorance Blue