debtcom
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Debt.com Business in a Box | 1 | – | Jan 9, 2026 |
Exploited and recent CVEs
- CVE-2025-13852 Debt.com Business in a Box <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%