WSO2 WSO2 Carbon Event Publisher UI

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-66235.2.26 – < 5.2.26.19 ; 5.2.41 – < 5.2.41.6 ; 5.2.57 – < 5.2.57.7 ; …Stored Cross-Site Scripting via XML Input in Multiple WSO2 Products Allows UI Manipulation and RedirectionMEDIUM 4.30.3 %