CVE-2025-15659

MediumCVSS 6.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile — higher than 3% of all known CVEs

Versions of Elizaibots <= 1.0.2 are vulnerable to Cross Site Scripting (XSS), allowing attackers to inject malicious code into the application.

XSS attacks can lead to user data theft and session hijacking, posing a significant security risk to the organization.

It is recommended to update Elizaibots to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Contributor Cross Site Scripting (XSS) in Elizaibots <= 1.0.2 versions.