Opentext · Opentext Web Site Management Server · CVE-2025-13672
**Name of the Vulnerable Software and Affected Versions**
OpenText Web Site Management Server versions 16.7.0 through 16.7.1
**Description**
The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to Reflected Cross-site Scripting (XSS). This allows for the injection of malicious JavaScript code through URL parameters. When a page preview is rendered, the injected script can execute on the client side. The issue involves rendering malicious scripts when a page preview is generated.
**Recommendations**
Update OpenText Web Site Management Server to a version later than 16.7.1.