CVE-2025-66421: Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6…

Tryton sao versions before 7.6.11 are vulnerable to XSS due to unescaped completion values, fixed in versions 7.6.11, 7.4.21, 7.0.40, and 6.0.69.

Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69.

Related CVEs