What is the CVSS score of EUVD-2025-209768?

EUVD-2025-209768 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

docuForm EUVD-2025-209768

| CVE-2025-61309 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-05-11 mitre

GHSA-799r-x9x9-g2r7

XSS PHP

6.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

May 11, 2026 - 20:38 vuln.today

CVSS changed

May 11, 2026 - 20:37 NVD

6.1 (MEDIUM)

CVE Published

May 11, 2026 - 00:00 nvd

MEDIUM 6.1

CVE Published

May 11, 2026 - 00:00 nvd

UNKNOWN (no severity yet)

DescriptionCVE.org

A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_departments.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

AnalysisAI

Reflected cross-site scripting (XSS) in GmbH Mercury Managed Print Services docuForm v11.11c allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by injecting a malicious payload into an unfiltered variable in the dfm-menu_departments.php component. The vulnerability requires user interaction (clicking a crafted link) and affects confidentiality and integrity with limited scope. No public exploit code has been independently confirmed at this time, though the detailed nature of the component reference suggests proof-of-concept research exists.

Technical ContextAI

The vulnerability exists in a PHP-based web application (docuForm) that manages print services. The affected component dfm-menu_departments.php fails to sanitize or encode user-supplied input before reflecting it back in HTTP responses, allowing an attacker to inject JavaScript that executes in the victim's browser session. This is a classic reflected XSS vulnerability (CWE-79: Improper Neutralization of Input During Web Page Generation). The reflected nature means the payload must be delivered via a crafted URL or form submission; it is not stored on the server. The scope change (S:C in CVSS vector) indicates the vulnerability can affect resources beyond the vulnerable component, such as accessing session tokens or performing actions on behalf of the authenticated user.

RemediationAI

Upgrade to a patched version of docuForm released by GmbH Mercury (exact patch version not confirmed in available data - contact vendor at https://www.docuform.de/ for release notes). As an interim workaround, implement input validation and output encoding on the dfm-menu_departments.php component: use PHP htmlspecialchars() or a context-aware encoding function to sanitize all user-supplied input before including it in HTML responses. Additionally, apply a Web Application Firewall (WAF) with XSS detection signatures to the docuForm application to filter malicious payloads at the network boundary (note: WAF rules may block legitimate requests if tuning is insufficient). For defense-in-depth, enforce Content Security Policy (CSP) headers to restrict inline JavaScript execution - this mitigates impact even if XSS injection succeeds, though requires careful policy configuration to avoid breaking application functionality. Organizations should also verify that docuForm is deployed behind authentication controls and network segmentation to limit exposure to untrusted users.