CVE-2025-62716 | makeplane up to 1.0.x next_path cross site scripting (GHSA-6fj7-xgpg-mj6f)

October 25, 2025 Yanac

A vulnerability identified as problematic has been detected in makeplane plane up to 1.0.x. The affected element is an unknown function. This manipulation of the argument next_path causes cross site scripting.

This vulnerability appears as CVE-2025-62716. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More