Quick answers
- Is CVE-2025-55888 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2025-55888 being exploited in the wild.
- How severe is CVE-2025-55888?
- High severity, with a CVSS score of 7.3, published 22 September 2025.
- Which products and versions are affected?
- Ard Gec En Ligne -.
- Is there a fix for CVE-2025-55888?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2025-55888 attacked?
- It is attacked over the network, in a web application.
- Am I affected by CVE-2025-55888?
- Check whether you run Ard Gec En Ligne at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A Cross-Site Scripting (XSS) vulnerability exists in the Ajax transaction manager endpoint (tx_afereload_ajax_transactionmanager) of ARD GEC en ligne. The vulnerability is rooted in the improper sanitization and encoding of the 'accountName' field within Ajax responses. An attacker can intercept and modify these responses to include malicious JavaScript, which is subsequently executed by the victim's browser when the data is rendered. This flaw is reachable over the network without authentication and can result in session hijacking or cookie theft. A proof-of-concept has been identified in public repositories.
Affected products
- ARD GEC en ligne -
Timeline
- 2025-09-22: advisory: Initial disclosure by MITRE and CISA-ADP