Question: What is CVE-2025-1076?
Answer: CVE-2025-1076 is a vulnerability classified as medium with a CVSS score of 4.8. It falls under CWE-79 and affects the system as follows: A Stored Cross-Site Scripting (Stored XSS) vulnerability has been found in the Holded application. This vulnerability could allow an attacker to store a JavaScript payload within the editable ‘name’ and ‘icon’ parameters of the Activities functionality.