CVE-2025-11946

A security flaw has been discovered in LogicalDOC Community Edition up to 9.2.1. This issue affects some unknown processing of the file /frontend.jsp of the component Add Contact Page. Performing manipulation of the argument First Name/Last Name/Company/Address/Phone/Mobile results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79
• CWE-94
• CWE-79

• https://gist.github.com/thezeekhan/231d87163fbb84f94c9c94f13b88db90Exploit, Third Party Advisory
• https://gist.github.com/thezeekhan/231d87163fbb84f94c9c94f13b88db90#steps-to-reproduceExploit, Third Party Advisory
• https://vuldb.com/?ctiid.329026Permissions Required, VDB Entry
• https://vuldb.com/?id.329026Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.671389Third Party Advisory, VDB Entry

Published

Oct 19, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11940A security vulnerability has been detected in LibreWolf up t…7.3
• CVE-2025-11941A vulnerability was detected in e107 CMS up to 2.3.3. This i…8.1
• CVE-2025-11942A flaw has been found in 70mai X200 up to 20251010. Affected…9.8
• CVE-2025-11943A vulnerability has been found in 70mai X200 up to 20251010.…9.8
• CVE-2025-11944A vulnerability was determined in givanz Vvveb up to 1.0.7.3…7.2
• CVE-2025-11945A vulnerability was identified in toeverything AFFiNE up to …3.5
• CVE-2025-11947A weakness has been identified in bftpd up to 6.2. Impacted …4.5
• CVE-2025-11948Document Management System developed by Excellent Infotek ha…9.8
• CVE-2025-11949EasyFlow .NET and EasyFlow AiNet, developed by Digiwin, has …8.7
• CVE-2025-1195A vulnerability, which was classified as problematic, has be…5.4
• CVE-2025-11950Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2025-11952Stored Cross-site Scripting (XSS) in Oct8ne Chatbot v2.3. Th…6.1