CVE-2025-65640

Descrição

Cross Site Scripting (XSS) vulnerability in the -Task in Progress / Recent- page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text fields when creating a new document. Specifically, when an authenticated attacker submits data containing JavaScript code within these fields, the application fails to properly sanitize or escape the content. As a result, the injected script is executed when the page is rendered, allowing the attacker to execute arbitrary JavaScript in the context of other users- browsers who view the affected page.