A vulnerability classified as problematic was found in SysPass 3.2.x. This vulnerability affects unknown code of the component Notification. The manipulation leads to cross site scripting.
This vulnerability was named CVE-2025-25476. The attack can be initiated remotely. There is no exploit available.