What’s Vulnerable › Vulnerabilities

CVE-2025-65640

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-04 · updated 2026-07-22
• Weakness: CWE-79

Description

Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text fields when creating a new document. Specifically, when an authenticated attacker submits data containing JavaScript code within these fields, the application fails to properly sanitize or escape the content. As a result, the injected script is executed when the page is rendered, allowing the attacker to execute arbitrary JavaScript in the context of other users' browsers who view the affected page.

References

• https://github.com/vincenzo-emanuele/CVE-2025-65640
• https://www.arket.it/
• https://github.com/vincenzo-emanuele/CVE-2025-65640

Get alerted when CVE-2025-65640 or the next vulnerability affects your stack