A vulnerability, which was classified as problematic, was found in AllskyTeam AllSky 2024.12.06. Affected by this issue is the function
showMessages of the file status_messages.php. Executing manipulation of the argument config/filename/extratext can lead to cross site scripting.
This vulnerability is tracked as CVE-2025-65572. The attack can be launched remotely. No exploit exists.
