Cross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web script or HTML via the "tree" parameter.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://4pace.com/en/products/cadclick | Product |
| https://medium.com/@mdjab3r/cve-2025-25905-ffff82c635f2 | Exploit Third Party Advisory |
| https://support.cadclick.com | Product |
Configurations
History
07 Jul 2025, 17:40
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:4pace:cadclick:*:*:*:*:*:*:*:* | |
| First Time |
4pace
4pace cadclick |
|
| References | () https://4pace.com/en/products/cadclick - Product | |
| References | () https://support.cadclick.com - Product | |
| References | () https://medium.com/@mdjab3r/cve-2025-25905-ffff82c635f2 - Exploit, Third Party Advisory |
25 Jun 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-25 16:15
Updated : 2025-07-07 17:40
NVD link : CVE-2025-25905
Mitre link : CVE-2025-25905
JSON object : View
Products Affected
4pace
- cadclick
CWE
No CWE.