Heise.De Citrix NetScaler ADC and Gateway XSS Vulnerability Disclosed
Article Content
Browse articles 
A cross-site scripting (XSS) vulnerability has been identified in Citrix's NetScaler ADC and Gateway products, tracked as CVE-2025-12101. This flaw allows attackers to inject malicious scripts into web pages, potentially leading to session hijacking and data theft. Users are advised to update their software promptly to mitigate the risk.
Ask AI about this cluster
Answers cite the sources they use
Updated 242d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track Citrix and CVE-2025-12101 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Path Traversal Vulnerability in FearlessCMS Disclosed A critical vulnerability, CVE-2026-63190, has been identified in FearlessCMS, a flat-file content management system, allowing unauthenticated attackers to execute privileged PHP scripts in the `/admin/` directory. This flaw arises from improper authentication and path validation, enabling attackers to perform path… 
Critical Unauthenticated File Upload Vulnerabilities Disclosed in WidzialniCMS and WordPress Plugin Two critical vulnerabilities have been disclosed affecting WidzialniCMS and the WordPress plugin Contact Form 7. CVE-2026-114432 in Contact Form 7 allows unauthenticated file uploads leading to remote code execution (RCE) for versions prior to 6.2.4. CVE-2026-110468 and CVE-2026-110469 in WidzialniCMS enable…