CVE-2025-9728 | givanz Vvveb 1.0.7.2 login.tpl Email/Password cross site scripting (ID 323)
A vulnerability, which was classified as problematic, was found in givanz Vvveb 1.0.7.2. This affects an unknown part of the file app/template/user/login.tpl. Such manipulation of the argument Email/Password leads to cross site scripting.
This vulnerability is documented as CVE-2025-9728. The attack can be executed remotely. There is not any exploit available.
Applying a patch is advised to resolve this issue.