Back to Database
Status published
Medium
CVE-2025-3894
Stored XSS in MegaBIP
Vulnerability Description
Text editor embedded into MegaBIP software does not neutralize user input allowing Stored XSS attacks on other users. In order to use the editor high privileges are required. Version 5.20 of MegaBIP fixes this issue.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-3894
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Kamil Szczurowski
- Robert Kruczek
References
Affected Vendor
Jan Syski
View all reports →Affected Software
MegaBIP
Vulnerable Versions:
0
Timeline
Official Publish:
May 23rd, 2025
Last Modified:
May 23rd, 2025
Added to House:
July 22nd, 2026