CVE-2025-40904Medium· 6.5▾ SunlitA Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malicious remote strategies containing HTML …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malicious remote strategies containing HTML tags through the sync. When a victim views the affected remote strategy in the Smart Polling functionality, the injected HTML renders in their browser, enabling phishing and possibly open redirect attacks. Full XSS exploitation and direct information disclosure are prevented by the existing input validation and Content Security Policy configuration.
cmc < 26.1.0guardian < 26.1.0Upgrade past the affected range:
cmc 26.1.0guardian 26.1.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-40902Medium· 5.9A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter
CVE-2025-40903Medium· 5.9A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter
CVE-2025-40901Medium· 5.9A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter
CVE-2025-40891Medium· 4.7A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data
CVE-2025-40900Medium· 4.6An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter
CVE-2016-3709Medium· 6.1Possible cross-site scripting vulnerability in libxml after commit 960f0e2.