What’s Vulnerable › Vulnerabilities
CVE-2025-13873: The feature to import a survey is prone to stored Cross-Site Script attacks
- Severity: medium (CVSS 5.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-12-02 · updated 2026-09-03
- Weakness: CWE-79
Description
Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject arbitrary JavaScript code, which executes in the browsing context of any visitor accessing the compromised survey.
Affected products
- ObjectPlanet Opinio: 7.26
References
Get alerted when CVE-2025-13873 or the next vulnerability affects your stack