CVE-2025-63498CVE-2025-63498MEDIUM6.1alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.Published: 2025-11-24Modified: 2026-06-17CVSS 3.xMEDIUM 6.1CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NReferenceshttps://github.com/Alinto/sogo/commit/9e20190fad1a437f7e1307f0adcfe19a8d45184chttps://github.com/Alinto/sogo/releases/tag/SOGo-5.12.4https://github.com/xryptoh/CVE-2025-63498https://lists.debian.org/debian-lts-announce/2025/11/msg00029.html
