Advisories · Technology

WSO2 Carbon API Manager Publisher REST API.

Every CVE that names WSO2 Carbon API Manager Publisher REST API among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-12544 CVE record

CVSS 4.8 Medium

Stored Cross-Site Scripting in Multiple WSO2 Products
- WSO2 API Manager
- WSO2 Carbon API Manager Publisher REST API
- Cross-site scripting (XSS)
Not analysed yet 2 Nov 2026