https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:47:21.695101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-1888 CVE-2025-1888 — Reflected Cross Site Scripting in Aperio Eslide Manager 2026-10-07T02:47:21.696810+00:00

Affected: Leica BioSystems Aperio Eslide Manager

The Leica Web Viewer within the Aperio Eslide Manager Application is vulnerable to reflected cross-site scripting (XSS). An authenticated user can access the slides within a project and injecting malicious JavaScript into the "memo" field. The memo field has a hover over action that will display a Microsoft Tool Tip which a user can use to quickly view the memo associated with the slide and execute the JavaScript.