Back to search
CVE-2025-6078
Published: Aug 2, 2025
Modified: Nov 3, 2025
PUBLISHED
Description
Partner Software's Partner Software application and Partner Web application allows an authenticated user to add notes on the 'Notes' page when viewing a job but does not completely sanitize input, making it possible to add notes with HTML tags and JavaScript, enabling an attacker to add a note containing malicious JavaScript, leading to stored XSS (cross-site scripting).
| Vendor | Product | Versions |
|---|---|---|
Partner Software | Partner Web | affected 4.32 - < 4.32.2 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now