Skip to content
Info Published: Dec 16, 2025

CVE-2025-68115

0 CVSS Score Info
Export CVE-2025-68115 Data:
Share:
Link copied!

Description

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prior to 8.6.1 and 9.1.0-alpha.3, a Reflected Cross-Site Scripting (XSS) vulnerability exists in Parse Server's password reset and email verification HTML pages. The patch, available in versions 8.6.1 and 9.1.0-alpha.3, escapes user controlled values that are inserted into the HTML pages. No known workarounds are available.

Weaknesses (CWE)

  • CWE-79

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More

Related Vulnerabilities

CVE-2000-1205 CVSS 0 Same weakness: CWE-79 CVE-2002-0270 CVSS 0 Same weakness: CWE-79 CVE-2002-1651 CVSS 0 Same weakness: CWE-79 CVE-2002-1700 CVSS 0 Same weakness: CWE-79 CVE-2002-1852 CVSS 0 Same weakness: CWE-79

CVE History Timeline

Dec 16, 2025 01:15 New CVE Received
← Back to CVE Tracker