CVE-2025-41406 in wivia 5

الملخص

بحسب MITRE • 30/05/2025

Cross-site scripting vulnerability exists in wivia 5 all versions. If exploited, when a user connects to the affected device with a specific operation, an arbitrary script may be executed on the web browser of the moderator user.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: Jpcert
• حجز: 27/05/2025
• إفشاء: 30/05/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-310639
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 5.4 (CNA)
• EPSS: 0.00198
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-41406
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-41406
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-41406/