CVE-2025-48470

Stored Cross site Scripting (XSS)

Medium · published June 24, 2025

CVSS v3.1
4.1
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed in other users’ browser, potentially leading to session hijacking, defacement, credential theft, or privilege escalation.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.6th percentile
Published
2025-06-24T02:19Z
EPSS history
Timeline
  • 24 JUN 02:19Z
    Stored Cross site Scripting (XSS)
    cvelistv5