PYSEC-2025-234

A vulnerability, which was classified as problematic, has been found in Huashengdun WebSSH up to 1.6.2. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument hostname/port leads to cross site scripting. The attack may be launched...

CVE-2025-7885

Huashengdun WebSSH (up to v1.6.2) contains a cross-site scripting flaw in the Login Page caused by manipulation of the hostname/port argument. The vulnerability can be exploited remotely, and the public exploit has been disclosed; the vendor has not responded. Remediation mentioned in PT-2025-301...