Threats tagged 'ghsa-cvh7-25fm-227j'

CVE-2025-20353 is a cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco Catalyst Center. It allows an unauthenticated remote attacker to execute arbitrary script code by tricking a user into clicking a crafted link. The vulnerability arises from insufficient input validation. Exploitation could lead to unauthorized script execution or access to sensitive browser information. The CVSS 3.1 base score is 6.1, indicating medium severity.