CVE Feed

    Dashboard / CVE / CVE-2025-55887

    CVE-2025-55887

    Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the transactionID GET parameter on the transaction confirmation page. Due to improper input validation and output encoding, an attacker can inject malicious JavaScript code that is executed in the context of a user s browser. This can lead to session hijacking, theft of cookies, and other malicious actions performed on behalf of the victim.

    Published:Sep 22, 2025
    Last Modified:Oct 14, 2025
    EPS:Sep 22, 2025
    EPSS Score:0.00033
    CVSS Score:6.1

    Affected Products

    Vendor
    Ard
    Product
    Ard
    Vendor
    Ard
    Product
    Gec En Ligne

    Exploits

    https://github.com/0xZeroSec/CVE-2025-55887https://github.com/0xZeroSec/CVE-2025-55887https://github.com/0xZeroSec/CVE-2025-55887

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High