Skip to content
Sign in
5.1 Medium

CVE-2025-3899 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in…

Description

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Certificates page on Webserver that could cause an unvalidated data injected by authenticated malicious user leading to modify or read data in a victim’s browser.

Affected products and versions

Product Affected versions Fixed in
Modicon Controllers M241/M251 Versions not published

Other CVEs of Modicon Controllers M241/M251

The 7 CVEs of Modicon Controllers M241/M251 →
CVE-2025-13902 CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that… 5.1 Medium CVE-2025-3117 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists… 5.1 Medium CVE-2025-3116 CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated… 7.1 High CVE-2025-3905 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists… 5.1 Medium
Track this CVE