5.1
Moyenne
CVE-2025-13902 CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…
Description
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attackers can have a victim’s browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server containing the injected payload.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Modicon Controllers M241/M251 | Versions non publiées | |
| Modicon Controllers M258/LMC058 | Versions non publiées |
Autres CVE de Modicon Controllers M241/M251
Les 7 CVE de Modicon Controllers M241/M251 →
CVE-2025-3117
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists…
5.1
Moyenne
CVE-2025-3116
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated…
7.1
Élevée
CVE-2025-3905
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists…
5.1
Moyenne
CVE-2025-3112
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated…
7.1
Élevée