Threats tagged 'ghsa-9x3p-mvq5-2fgh'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2025-53701Vilar VS-IPC1002 IP cameras are vulnerable to Reflected XSS (Cross-site Scripting) attacks, because parameters in GET Medium4.82025-10-23GCVE DatabaseCVE-2025-53701 Vilar VS-IPC1002 IP cameras have a reflected cross-site scripting (XSS) vulnerability in the /cgi-bin/action endpoint due to improper sanitization of GET request parameters. This flaw allows attackers to craft malicious URLs that, when visited by logged-in admin users, can execute arbitrary scripts in their browsers. Only version 1.1.0.18 was tested, and other versions may also be affected. No vendor response or patch is currently available. Report on CVE-2025-53701 Vulnerability CWE-79 #ghsa-9x3p-mvq5-2fgh	GCVE Database	2025-10-23

Page 1 of 1