CVE-2019-25323CWE-79

Heatmiser Netmonitor 3.03 - HTML Injection

Medium · published February 12, 2026

CVSS v4.0

5.1

EPSS

Percentile

17.0

In the wild

Unconfirmed

What it is

Heatmiser Netmonitor v3.03 contains an HTML injection vulnerability in the outputSetup.htm page that allows attackers to inject malicious HTML code through the outputtitle parameter. Attackers can craft specially formatted POST requests to the outputtitle parameter to execute arbitrary HTML and potentially manipulate the web interface's displayed content.

The record

Technical detail

CVSS v4.0: 5.1 · MEDIUM
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS: 0.00262 · 17.0th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2026-02-12T22:48Z

EPSS history

Timeline

12 FEB 22:48Z
Heatmiser Netmonitor 3.03 - HTML Injection
cvelistv5