CVE-2025-52179
Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Revolution 4.1 and earlier allows remote unauthenticated attackers to inject arbitrary JavaScript via the pHtmlSource parameter of the /ahrw/jsp/gsfr_feditorHTML.jsp endpoint.
CVSS 3.1 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products