CVE-2025-59904
Received Received - Intake
Stored XSS in Kubysoft /kForms/app Enables Persistent Script Injection

Publication date: 2026-02-16

Last updated on: 2026-03-09

Assigner: Spanish National Cybersecurity Institute, S.A. (INCIBE)

Description
Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint. This issue allows malicious scripts to be injected and executed persistently in the context of users accessing the affected resource.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-16
Last Modified
2026-03-09
Generated
2026-06-16
AI Q&A
2026-02-16
EPSS Evaluated
2026-06-15
NVD
CVE-2025-59904
EUVD
EUVD-2025-206984
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
kubysoft kubysoft *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Mitigation Strategies

The vulnerability has been fixed by the Kubysoft development team in the latest software version.

To mitigate this vulnerability, you should update your Kubysoft ERP software to the latest version where the issue is resolved.

Detection Guidance

I don't know

Compliance Impact

I don't know

Executive Summary

[{'type': 'paragraph', 'content': 'CVE-2025-59904 is a Stored Cross-Site Scripting (XSS) vulnerability found in Kubysoft, a cloud-based ERP software platform.'}, {'type': 'paragraph', 'content': "The vulnerability occurs through multiple parameters in the '/kForms/app' endpoint, allowing attackers to inject malicious scripts."}, {'type': 'paragraph', 'content': 'These malicious scripts are executed persistently in the context of users who access the affected resource, potentially compromising their interactions.'}] [1]

Impact Analysis

This vulnerability allows attackers to inject and execute malicious scripts in the context of users accessing the affected Kubysoft resource.

As a result, users may be exposed to risks such as session hijacking, theft of sensitive information, or unauthorized actions performed on their behalf.

Since the scripts execute persistently, the impact can continue until the vulnerability is fixed or mitigated.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-59904. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart