Anapi Group H6Web

• CVE-2025-1271 Medium 6.1 Reflected Cross-Site Scripting (XSS) vulnerability in H6Web 0.3%
• CVE-2025-1270 Critical 9.1 Insecure direct object reference (IDOR) vulnerability in H6Web 0.4%