PT-2025-43931 · Wisencode · Wisencode

Skalvin · Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-12264

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Wisencode versions prior to 20251013

Description A security flaw exists in Wisencode up to version 20251012. This issue affects an unknown functionality within the Create Support Ticket Handler component, specifically the file /support-ticket/create. Manipulation of the Message argument can lead to cross site scripting. The attack can be initiated remotely. The vendor was contacted regarding this issue but did not respond.

Recommendations Update Wisencode to a version later than 20251012. Avoid using the Message parameter in the /support-ticket/create endpoint until the issue is resolved.

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-12264

Affected Products

Wisencode

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-12264 · Security Note
• https://vuldb.com/?ctiid.329935 · Note
• https://vuldb.com/?id.329935 · Note
• https://twitter.com/CVEnew/status/1982762934221570221 · Twitter Post
• https://vuldb.com/?submit.673806 · Note
• https://t.me/cveNotify/140433 · Telegram Post