PT-2025-37729 · Explorance · Explorance Blue

Ali Rehan Muhammad Saleem + 1 · Published 2025-09-15 · Updated 2026-02-05 · CVE-2025-52344

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Explorance Blue version 8.1.2

Description Explorance Blue version 8.1.2 contains multiple Cross Site Scripting (XSS) vulnerabilities in input fields. These vulnerabilities allow attackers to inject arbitrary JavaScript code into a user’s browser via the Group name and Project Description input fields.

Recommendations As a mitigation, sanitize all user-supplied input for the Group name and Project Description fields.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-52344

Affected Products

Explorance Blue

References · 8

• 🔥 https://gist.github.com/SaraAlsaif/f363b307f29c865d499678eca3106b43 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-52344 · Security Note
• https://osv.dev/vulnerability/CVE-2025-52344 · Vendor Advisory
• https://twitter.com/sarah3361/status/1967991884753838584 · Twitter Post
• https://explorance.com/products/blue · Note
• https://twitter.com/CVEnew/status/2003567353775235299 · Twitter Post
• https://t.me/CVEtracker/32538 · Telegram Post
• https://t.me/cveNotify/151008 · Telegram Post