CVE-2025-2976

A vulnerability was found in GFI KerioConnect 10.0.6. It has been classified as problematic. Affected is an unknown function of the component File Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79
• CWE-94
• CWE-79

• https://github.com/0xs1ash/poc/blob/main/xss.md#2-when-a-file-with-a-malicious-javascript-code-in-its-name-is-uploaded-to-the-system-it-is-displayed-again-on-the-page-within-the-input-field-without-being-sanitized-this-creates-the-potential-for-an-xss-attBroken Link
• https://vuldb.com/?ctiid.302028Permissions Required, VDB Entry
• https://vuldb.com/?id.302028Third Party Advisory, VDB Entry

Published

Mar 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-29744pg-promise before 11.5.5 is vulnerable to SQL Injection due …5.4
• CVE-2025-29745A vulnerability affecting the scanning module in Emsisoft An…7.5
• CVE-2025-29746Cross Site Scripting vulnerability in Koillection v.1.6.10 a…6.1
• CVE-2025-2975A vulnerability was found in GFI KerioConnect 10.0.6 and cla…5.4
• CVE-2025-29756SunGrow's back end users system iSolarCloud https://isolarc…8.3
• CVE-2025-29757An incorrect authorisation check in the the 'plant transfer'…9.4
• CVE-2025-29763Rejected reason: “This CVE ID is Rejected and will not be us…
• CVE-2025-29766Tuleap is an Open Source Suite to improve management of soft…4.3
• CVE-2025-29768Vim, a text editor, is vulnerable to potential data loss wit…4.4
• CVE-2025-29769libvips is a demand-driven, horizontally threaded image proc…5.5
• CVE-2025-2977A vulnerability was found in GFI KerioConnect 10.0.6. It has…5.4
• CVE-2025-29770vLLM is a high-throughput and memory-efficient inference and…6.5