CVE-2025-59467

CRITICO 9.6CVE-2025-59467 · Published 05/01/2026 · updated 07/10/2026

In breve

CVE-2025-59467 è una vulnerabilità CRITICO (CVSS 9.6) che riguarda argentina afip invoices (ui).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.29%, superiore al 21.4% delle vulnerabilità.
Correzione: aggiornare a 1.3.0 o successiva.

Package	Affected versions	Patched versions
argentina afip invoices ui	`< 1.3.0`	`1.3.0`

Description

A Cross-Site Scripting (XSS) vulnerability in the UCRM Argentina AFIP invoices Plugin (v1.2.0 and earlier) could allow privilege escalation if an Administrator is tricked into visiting a crafted malicious page. This plugin is disabled by default. Affected Products: UCRM Argentina AFIP invoices Plugin (Version 1.2.0 and earlier) Mitigation: Update UCRM Argentina AFIP invoices Plugin to Version 1.3.0 or later.

References

community.ui.com/releases/Security-Advisory-Bulletin-057/6d3f2a51-22b8-47a1-9296-1e9dcd64e073 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free