CVE-2025-13584 | Eigenfocus up to 1.4.0 Decription entry.description/time_entry.description cross site scripting (ID 358)

November 23, 2025 Yanac

A vulnerability was found in Eigenfocus up to 1.4.0. It has been rated as problematic. This vulnerability affects unknown code of the component Decription Handler. The manipulation of the argument entry.description/time_entry.description leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-13584. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Upgrading the affected component is advised.VulDB Recent EntriesRead More