Vulnerability Details CVE-2025-63848
Stored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 15.3%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2025-63848
-
cpe:2.3:a:swi-prolog:swish:1.0.0
-
cpe:2.3:a:swi-prolog:swish:1.1.0
-
cpe:2.3:a:swi-prolog:swish:1.2.0
-
cpe:2.3:a:swi-prolog:swish:1.3.0
-
cpe:2.3:a:swi-prolog:swish:1.3.1
-
cpe:2.3:a:swi-prolog:swish:1.4.0
-
cpe:2.3:a:swi-prolog:swish:1.5.0
-
cpe:2.3:a:swi-prolog:swish:1.5.1
-
cpe:2.3:a:swi-prolog:swish:1.6.0
-
cpe:2.3:a:swi-prolog:swish:1.7.0
-
cpe:2.3:a:swi-prolog:swish:2.0.0
-
cpe:2.3:a:swi-prolog:swish:2.1.0
-
cpe:2.3:a:swi-prolog:swish:2.2.0