CVE-2025-7885

Huashengdun WebSSH (up to v1.6.2) contains a cross-site scripting flaw in the Login Page caused by manipulation of the hostname/port argument. The vulnerability can be exploited remotely, and the public exploit has been disclosed; the vendor has not responded. Remediation mentioned in PT-2025-301...