PatchSiren

GmbH Mecury CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM GmbH Mecury CVE published 2026-05-11

CVE-2025-61309

A reflected cross-site scripting (XSS) vulnerability exists in the dfm-menu_departments.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c. This vulnerability allows attackers to inject crafted payloads into unfiltered variable values, potentially leading to arbitrary Javascript execution in the context of a user's browser. The vulnerability's impact includes potential for arbitrary Ja [truncated]

MEDIUM GmbH Mecury CVE published 2026-05-11

CVE-2025-61307

A reflected cross-site scripting (XSS) vulnerability exists in the acc-menu_papers.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c. This vulnerability allows attackers to inject crafted payloads into unfiltered variable values, potentially leading to arbitrary Javascript execution in the context of a user's browser. The vulnerability has a CVSS score of 6.1 and is classified as MEDI [truncated]

MEDIUM GmbH Mecury CVE published 2026-05-11

CVE-2025-61305

A reflected cross-site scripting (XSS) vulnerability exists in the dfm-menu_firmware.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c. This vulnerability allows attackers to inject crafted payloads into unfiltered variable values, potentially leading to arbitrary Javascript execution in the context of a user's browser. The vulnerability has a CVSS score of 6.1 and is classified as ME [truncated]