CVE-2025-13902
Vulnerability Description
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attackers can have a victim’s browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server containing the injected payload.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-79
Source
NVD
Vendor
Schneider Electric
Product
Modicon Controllers M241/M251, Modicon Controllers M258/LMC058
Discussion (0)
Add Comment
No comments yet. Be the first!