CVE-2025-27585

Summary

CVE-2025-27585 is a stored cross-site scripting (XSS) vulnerability affecting Serosoft Solutions Pvt Ltd's Academia Student Information System (SIS) EagleR version 1.0.118. This issue allows attackers to inject malicious scripts or HTML code into the Print Name parameter of the /rest/staffResource/update endpoint. Successful exploitation grants attackers the ability to execute arbitrary web scripts on affected users' browsers, potentially leading to data theft or unauthorized system access. It is recommended that users update to a patched version of the software as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.