CVE-2025-69749 - Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code

MEDIUM

Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code

Published Jan 29, 2026

6.1

MEDIUM

CVSS 3.1

EPSS 0.26%

Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-206532		Advisory
https://github.com/milantgh/otalexss		Exploit
https://github.com/otale/tale		Product

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 29, 2026

Updated Jan 29, 2026

Reserved Jan 9, 2026

Updated Jan 29, 2026

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 29, 2026

Updated Jan 29, 2026

Exploited since n/a