CVE-2025-65640

EIP tracks 1 public exploit for CVE-2025-65640. PoCs published by vincenzo-emanuele.

AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2025-65640, a stored XSS vulnerability in Globe Document Intelligence version 5.0.0.559. It includes steps to reproduce the vulnerability, impact assessment, and mitigation recommendations.

Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text fields when creating a new document. Specifically, when an authenticated attacker submits data containing JavaScript code within these fields, the application fails to properly sanitize or escape the content. As a result, the injected script is executed when the page is rendered, allowing the attacker to execute arbitrary JavaScript in the context of other users' browsers who view the affected page.