The vulnerability of the `StandaloneVpnClientsController.addStandaloneVpnClientAction()` function in the remote monitoring software with virtual private network capabilities, Advantech WebAccess/VPN, allows a attacker to execute XSS attacks.

The vulnerability of the StandaloneVpnClientsController.addStandaloneVpnClientAction function in the remote monitoring software with Virtual Private Network capabilities from Advantech WebAccess/VPN exists due to the lack of measures taken to protect the website structure. Exploiting this...

CVE-2025-34237

Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting XSS vulnerability via StandaloneVpnClientsController.addStandaloneVpnClientAction. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the...

CVE-2025-34237 Advantech WebAccess/VPN < 1.1.5 Stored XSS via StandaloneVpnClientsController.addStandaloneVpnClientAction()

Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting XSS vulnerability via StandaloneVpnClientsController.addStandaloneVpnClientAction. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the...

CVE-2025-34237

CVE-2025-34237 describes a stored cross-site scripting (XSS) vulnerability in Advantech WebAccess/VPN prior to version 1.1.5. The issue stems from insufficient validation/escaping of input in StandaloneVpnClientsController.addStandaloneVpnClientAction(), enabling an attacker to inject and execute...

CVE-2025-34237 Advantech WebAccess/VPN < 1.1.5 Stored XSS via StandaloneVpnClientsController.addStandaloneVpnClientAction()

Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting XSS vulnerability via StandaloneVpnClientsController.addStandaloneVpnClientAction. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the...

PT-2025-45354

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/VPN versions prior to 1.1.5 Description Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting XSS issue via the StandaloneVpnClientsController.addStandaloneVpnClientAction function...