PatchTheCVE: hallowelthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-58114: Improper Input Validation vulnerability in Hallo Welt! GmbH BlueSpice (Extension:CognitiveProcessDesigner) allhttps://patchthecve.com/cve/CVE-2025-58114.htmlhttps://patchthecve.com/cve/CVE-2025-58114.htmlWed, 17 Jun 2026 09:43:55 +0000MEDIUM 4.8: Improper Input Validation vulnerability in Hallo Welt! GmbH BlueSpice (Extension:CognitiveProcessDesigner) allows Cross-Site Scripting (XSS).This issue affects BlueSpice: from 5 through 5.1.1.CVE-2025-57880: Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceWhoIsOhttps://patchthecve.com/cve/CVE-2025-57880.htmlhttps://patchthecve.com/cve/CVE-2025-57880.htmlWed, 17 Jun 2026 09:43:33 +0000MEDIUM 5.4: Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceWhoIsOnline) allows Cross-Site Scripting (XSS). This issue affects BlueSpice: from 5 through 5.1.1.CVE-2025-48007: Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceAvatarhttps://patchthecve.com/cve/CVE-2025-48007.htmlhttps://patchthecve.com/cve/CVE-2025-48007.htmlWed, 17 Jun 2026 09:29:00 +0000MEDIUM 6.4: Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceAvatars) allows Cross-Site Scripting (XSS). This issue affects BlueSpice: from 5 through 5.1.1.CVE-2025-46703: Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allhttps://patchthecve.com/cve/CVE-2025-46703.htmlhttps://patchthecve.com/cve/CVE-2025-46703.htmlWed, 17 Jun 2026 09:26:50 +0000MEDIUM 6.4: Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-Site Scripting (XSS). This issue affects BlueSpice: from 5 through 5.1.1.