Home / Vulnerability Intelligence / CVE-2025-52204

CVE-2025-52204 - Vulnerability Analysis

N/a

Last Updated: March 23, 2026

Znuny ITSM - Stored XSS

Published: March 23, 2026Updated: March 23, 2026PoC Available

Overview

Znuny ITSM 6.5.x contains a stored XSS vulnerability caused by improper sanitization of the OTRSCustomerInterface parameter in the customer.pl endpoint, letting remote attackers execute scripts, exploit requires crafted input.

Severity & Score

Severity: N/a

Impact

Remote attackers can execute arbitrary scripts in users' browsers, potentially stealing session data or performing actions on behalf of users.

Mitigation

Update to the latest version of Znuny ITSM.

References

http://znuny.com
http://znunyitsm.com
https://github.com/j0qq3r/CVE-2025-52204

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2025-52204
Severity: N/a
Type: stored_xss
Status: new

CVSS Metrics

N/A