5.1
Medium
CVE-2025-5742 CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when…
Description
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated user modifies configuration parameters on the web server
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EVLink WallBox | Versions not published |
Other CVEs of EVLink WallBox
The 4 CVEs of EVLink WallBox →
CVE-2025-5743
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability…
7.0
High
CVE-2025-5741
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…
6.9
Medium
CVE-2025-5740
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could…
8.6
High