BaseFortify

Publication date: 2025-10-06

Last updated on: 2026-06-06

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description

Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing. This issue affects Logo Cloud: before 2.57.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-06

Last Modified

2026-06-06

Generated

2026-07-06

AI Q&A

2025-10-06

EPSS Evaluated

2026-07-05

NVD

CVE-2025-0607

EUVD

EUVD-2025-32174

Affected Vendors & Products

Vendor	Product	Version / Range
logo_software_inc	logo_cloud	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-116	The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). It occurs in Logo Software Inc.'s Logo Cloud product before version 2.57. The issue allows attackers to perform phishing attacks by injecting malicious scripts into web pages viewed by other users.

Impact Analysis

This vulnerability can impact you by enabling attackers to execute malicious scripts in your web application context, potentially leading to phishing attacks. This can result in unauthorized access to sensitive information, session hijacking, or other malicious activities that compromise user security and trust.

Hi! I’m here to help you understand CVE-2025-0607. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70