Sysreptor

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-66561 HIGH PATCH This Week

SysReptor is a fully customizable pentest reporting platform. Prior to 2025.102, there is a Stored Cross-Site Scripting (XSS) vulnerability allows authenticated users to execute malicious JavaScript in the context of other logged-in users by uploading malicious JavaScript files in the web UI. This vulnerability is fixed in 2025.102.

XSS Sysreptor

NVD GitHub

CVSS 3.1

7.3

EPSS

0.0%

CVE-2025-59945 HIGH PATCH This Month

SysReptor is a fully customizable pentest reporting platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Sysreptor

NVD GitHub

CVSS 3.1

8.1

EPSS

0.0%

CVE-2025-66561

EPSS 0% CVSS 7.3

HIGH PATCH This Week

XSS Sysreptor

NVD GitHub

CVE-2025-59945

EPSS 0% CVSS 8.1

HIGH PATCH This Month

SysReptor is a fully customizable pentest reporting platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Sysreptor

NVD GitHub