CVE-2025-65640

Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text fields when creating a new document. Specifically, when an authenticated attacker submits data containing JavaScript code within these fields, the application fails to properly sanitize or escape the content. As a result, the injected script is executed when the page is rendered, allowing the attacker to execute arbitrary JavaScript in the context of other users' browsers who view the affected page.

• CWE-79

• https://github.com/vincenzo-emanuele/CVE-2025-65640
• https://www.arket.it/
• https://github.com/vincenzo-emanuele/CVE-2025-65640

Published

Jun 4, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6561Certain hybrid DVR models ((HBF-09KD and HBF-16NK)) from Hun…9.8
• CVE-2025-6562Certain hybrid DVR models (HBF-09KD and HBF-16NK) from Hunt …8.8
• CVE-2025-65621Snipe-IT before 8.3.4 allows stored XSS, allowing a low-priv…5.4
• CVE-2025-65622Snipe-IT before 8.3.4 allows stored XSS via the Locations "C…5.4
• CVE-2025-6563A cross-site scripting vulnerability is present in the hotsp…4.8
• CVE-2025-65637A denial-of-service vulnerability exists in github.com/sirup…7.5
• CVE-2025-65647Insecure Direct Object Reference (IDOR) in the Track order f…4.3
• CVE-2025-6565A vulnerability was found in Netgear WNCE3001 1.0.0.50. It h…8.8
• CVE-2025-65656dcat-admin v2.2.3-beta and before is vulnerable to file incl…9.8
• CVE-2025-65657FeehiCMS version 2.1.1 has a Remote Code Execution via Unres…6.5
• CVE-2025-6566A vulnerability was found in oatpp Oat++ up to 1.3.1. It has…7.5
• CVE-2025-65669An issue was discovered in classroomio 0.1.13. Student accou…9.1