Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/10/09 12:14 a.m.•23 views

CVE-2025-60314

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...

5.4CVSS5.8AI score0.00253EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/08 3:32 p.m.•15 views

EUVD-2025-33169

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...

5.4CVSS5.4AI score0.00253EPSS
SaveExploits1References4
NVD
NVD
•added 2025/10/08 2:15 p.m.•19 views

CVE-2025-60314

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...

5.4CVSS0.00253EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/10/08 12:00 a.m.•23 views

CVE-2025-60314

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...

0.00253EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/08 12:00 a.m.•3 views

CVE-2025-60314: Improper Neutralization of Input During Web Page Generation

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...

5.4CVSS6.2AI score0.00253EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/10/08 12:00 a.m.•5 views

CVE-2025-60314

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...

6.3AI score0.00253EPSS
SaveExploits1References3
Rows per page
Query Builder