What is the CVSS score of EUVD-2025-209765?

EUVD-2025-209765 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

docuForm Managed Print Services EUVD-2025-209765

| CVE-2025-61306 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-05-11 mitre

GHSA-pjcw-frr6-gcf7

XSS PHP

6.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

May 11, 2026 - 20:38 vuln.today

CVSS changed

May 11, 2026 - 20:37 NVD

6.1 (MEDIUM)

CVE Published

May 11, 2026 - 00:00 nvd

MEDIUM 6.1

CVE Published

May 11, 2026 - 00:00 nvd

UNKNOWN (no severity yet)

DescriptionCVE.org

A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_coveragealerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

AnalysisAI

Reflected cross-site scripting (XSS) in docuForm v11.11c allows unauthenticated remote attackers to execute arbitrary JavaScript in a user's browser by crafting a malicious URL containing a payload injected into an unfiltered variable in the dfm-menu_coveragealerts.php component. Successful exploitation requires user interaction (clicking a malicious link) and can lead to session hijacking, credential theft, or malware delivery. CVSS 6.1 reflects moderate impact with low attack complexity; no public patch version has been identified.

Technical ContextAI

The vulnerability exists in a PHP component (dfm-menu_coveragealerts.php) that handles menu or alert data for a managed print services platform. The flaw is a classic reflected XSS (CWE-79) where user-supplied input from URL parameters or form variables is reflected back into the HTML response without proper sanitization or output encoding. The attack vector is network-based with no authentication required, suggesting the vulnerable endpoint is accessible to anonymous users. PHP applications commonly fail to properly encode output when directly embedding GET/POST variables into HTML or JavaScript contexts, allowing attackers to break out of intended syntax and inject executable code.

RemediationAI

Contact GmbH (vendor behind docuForm) immediately via https://www.docuform.de/ to obtain a patched version; as of this analysis, no specific fix version has been publicly announced. If a patch is not immediately available, implement immediate compensating controls: (1) disable or restrict network access to the dfm-menu_coveragealerts.php component at the web server or firewall level if the menu/alert feature is not critical to operations - this eliminates the attack vector but may degrade functionality; (2) deploy a Web Application Firewall (WAF) rule to detect and block requests containing script tags or common XSS payloads in URL parameters destined for this component; (3) configure browsers/HTTP headers with Content-Security-Policy (CSP) to restrict script execution (non-inline, non-eval), which mitigates damage even if XSS is triggered; (4) educate users not to click untrusted links to docuForm interfaces, especially from unsolicited emails or external sources. Monitor the vendor's security advisory channel (https://www.docuform.de/) and CISA for patch releases. The ZeroBreach security research group has published technical details; review their disclosure (https://ZeroBreach.de) for any vendor response timeline.