CVE-2025-14580

A security vulnerability has been detected in Qualitor up to 8.24.73. The impacted element is an unknown function of the file /Qualitor/html/bc/bcdocumento9/biblioteca/request/viewDocumento.php. Such manipulation of the argument cdscript leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. It is suggested to upgrade the affected component. The vendor confirms the existence of the issue: "We became aware of the issue through an earlier direct notification from the original reporter, and our engineering team promptly investigated and implemented the necessary corrective measures. (...) Updated versions containing the fix have already been provided to our customer base".

• CWE-79
• CWE-94
• CWE-79

• https://vuldb.com/?ctiid.336201Permissions Required, VDB Entry
• https://vuldb.com/?id.336201Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.705193Exploit, Third Party Advisory, VDB Entry

Published

Dec 12, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-14575An Uncontrolled Search Path Element vulnerability in the Ope…1.8
• CVE-2025-14576Insufficient validation of node IDs in Qt SVG module allows …7.8
• CVE-2025-14577Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Functio…9.8
• CVE-2025-14578A weakness has been identified in itsourcecode Student Manag…9.8
• CVE-2025-14579The Quiz Maker WordPress plugin before 6.7.0.89 does not san…4.8
• CVE-2025-1458The Element Pack Addons for Elementor – Free Templates and W…5.4
• CVE-2025-14581The HAPPY – Helpdesk Support Ticket System plugin for WordPr…4.3
• CVE-2025-14582A vulnerability was detected in campcodes Online Student Enr…7.2
• CVE-2025-14583A flaw has been found in campcodes Online Student Enrollment…9.8
• CVE-2025-14584A vulnerability has been found in itsourcecode COVID Trackin…9.8
• CVE-2025-14585A vulnerability was found in itsourcecode COVID Tracking Sys…9.8
• CVE-2025-14586A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.20…9.8