Security Advisory
CVE-2025-52179
6.1
MEDIUM
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Revolution 4.1 and earlier allows remote unauthenticated attackers to inject arbitrary JavaScript via the pHtmlSource parameter of the /ahrw/jsp/gsfr_feditorHTML.jsp endpoint.
Published Date
October 30, 2025
Official Source
NIST NVD Advisory