Boletines de Vulnerabilidades

CVE-2025-27361

   
Software afectado GOOGLE
 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thhake Photo Express for Google allows Reflected XSS. This issue affects Photo Express for Google: from n/a through 0.3.2.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-27361