This vulnerability (CVE-2025-22790) affects asmedia moseter versions up to 1.3.1 and is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation), commonly known as reflected cross-site scripting (XSS). An attacker can craft a malicious URL or input that, when processed by the vulnerable web interface, causes execution of arbitrary scripts in the user's browser. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges, requires user interaction, and impacts confidentiality, integrity, and availability to a limited extent. No patch or official fix has been published by asmedia, and this is not a cloud service, so remediation depends on vendor updates or user mitigation.

Successful exploitation of this reflected XSS vulnerability can lead to limited compromise of user confidentiality, integrity, and availability by executing arbitrary scripts in the context of the affected web application. This could enable actions such as session hijacking, defacement, or redirecting users to malicious sites. However, the impact is limited by the requirement for user interaction and the reflected nature of the vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should apply standard mitigations for reflected XSS such as input validation, output encoding, and employing web application firewalls if possible. Monitor vendor communications for updates regarding patches or official mitigations.