CVE-2025-41748 Reflected XSS vulnerability in pxc_Dot1xCfg.php

An XSS vulnerability in pxcDot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

CVE-2025-41751 Reflected XSS vulnerability in pxc_portCntr.php

An XSS vulnerability in pxcportCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

PT-2025-49821

Name of the Vulnerable Software and Affected Versions port util.php affected versions not specified Description An XSS issue exists in the port util.php file. An unauthenticated remote attacker can potentially trick an authenticated user into clicking a malicious link, allowing the attacker to...

CVE-2025-41751: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability in pxcportCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

PT-2025-49823

Name of the Vulnerable Software and Affected Versions versions prior to the fix for CVE-2025-41752 Description An XSS vulnerability exists in the pxc portSfp.php file. An unauthenticated remote attacker can exploit this to trick an authenticated user into clicking a malicious link, potentially...