CVE-2025-12518 | Bee Content Design Befree SDK up to 3.46.x Content Security Policy cross site scripting

A vulnerability, which was classified as problematic, has been found in Bee Content Design Befree SDK up to 3.46.x. Affected by this vulnerability is an unknown functionality of the component Content Security Policy Handler. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-12518. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.