CVE-2025-63229

The Mozart FM Transmitter web management interface (version WEBMOZZI-00287 ) is vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability in the /main0.php endpoint. The flaw exists because the ?m= query parameter does not properly neutralize input before generating the web page. An atta...