CVE-2025-71276 PUBLISHED

Assigner: mitre
Reserved: 22.03.2026 Published: 22.03.2026 Updated: 22.03.2026

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS Score: 6.4

Product Status

Vendor Alinto
Product SOGo
Versions Default: unaffected
  • affected from 0 to 5.12.5 (excl.)

References

Problem Types

  • CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') CWE