5.1
Medium
CVE-2025-13902 CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…
Description
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attackers can have a victim’s browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server containing the injected payload.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Modicon Controllers M241/M251 | Versions not published | |
| Modicon Controllers M258/LMC058 | Versions not published |
Other CVEs of Modicon Controllers M241/M251
The 7 CVEs of Modicon Controllers M241/M251 →
CVE-2025-3117
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists…
5.1
Medium
CVE-2025-3116
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated…
7.1
High
CVE-2025-3905
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists…
5.1
Medium
CVE-2025-3112
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated…
7.1
High