CVE-2025-48470
Stored Cross site Scripting (XSS)
- State
- Published
- Severity
- 4.1 Medium
- Published
- Jun 24, 2025
- Updated
- Jun 25, 2025
- Reserved
- May 22, 2025
Description
Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed in other users’ browser, potentially leading to session hijacking, defacement, credential theft, or privilege escalation.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.1 Medium | CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L | CSA |
Weaknesses
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected Products
| Product | Versions |
|---|---|
Advantech Wireless Sensing and Equipment (WISE)Advantech |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.